]> git.ipfire.org Git - thirdparty/strongswan.git/commit
libimcv: Support symlinks introduced by usrmerge
authorAndreas Steffen <andreas.steffen@strongswan.org>
Wed, 30 Dec 2020 09:16:57 +0000 (10:16 +0100)
committerAndreas Steffen <andreas.steffen@strongswan.org>
Fri, 8 Jan 2021 10:00:15 +0000 (11:00 +0100)
commit2ea1dac2030d2367e3d4b7b1314fe0943ff7cd94
tree88a45ccae235f7f7f5d5ef1453112f64066d2c7a
parent9b4a2322d656f3e816bc40fcccd5823d5c2a4067
libimcv: Support symlinks introduced by usrmerge

Debian, Ubuntu, Fedora et. al. started to apply usrmerge to their
latest Linux distributions, i.e.  /bin, /sbin, and /lib are now
symbolical links to /usr/bin, /usr/sbin, and /usr/lib, respectively.
Since executables and libraries are contained only once in Linux
packages (e.g. /bin/cp in coreutils but not /usr/bin/cp) this leads
to missing file measurments due to the symlinks when doing remote
attestation.

The new ita_attr_symlinks PA-TNC attribute fixes this problem by
collecting symbolic links pointing to directories on the client
platform.
14 files changed:
src/libimcv/Android.mk
src/libimcv/Makefile.am
src/libimcv/ita/ita_attr.c
src/libimcv/ita/ita_attr.h
src/libimcv/ita/ita_attr_symlinks.c [new file with mode: 0644]
src/libimcv/ita/ita_attr_symlinks.h [new file with mode: 0644]
src/libimcv/plugins/imc_attestation/imc_attestation.c
src/libimcv/plugins/imv_attestation/imv_attestation_agent.c
src/libimcv/plugins/imv_attestation/imv_attestation_build.c
src/libimcv/pts/components/ita/ita_comp_ima.c
src/libimcv/pts/pts.c
src/libimcv/pts/pts.h
src/libimcv/pts/pts_symlinks.c [new file with mode: 0644]
src/libimcv/pts/pts_symlinks.h [new file with mode: 0644]