| # Fuchsia Security: Binaries |
| ## Overview |
| This directory contains all source code that results in a component, package |
| or other binary that is intended to be included in some assembled version |
| of Fuchsia. |
| |
| - Host only tools should instead be placed in [//src/security/tools](//src/security/tools) |
| - Integration tests should be placed in [//src/security/tests](//src/security/tests) |
| |
| ## Project Descriptions |
| * [credential\_manager](//src/security/bin/credential_manager): Launched at |
| `/core/account/credential_manager` and serves the `fuchsia.identity.credential` FIDL |
| interfaces. The services provided by this component are consumed by the |
| `password_authenticator` for storing and retrieving user credentials. |
| * [root\_ssl\_certificates](//src/security/bin/root_ssl_certificates): Fuchsia's |
| TLS root CA certificates (a.k.a. truststore). It serves as a resource package |
| for components that use TLS. |
| * [tpm\_agent](//src/security/bin/tpm_agent): (WIP) Will be launched at `/bootstrap/tpm_agent` |
| on devices that have a TPM2.0 but not a CR50. It will serve the `fuchsia.tpm` FIDL interface. |
| This agent acts as a resource manager between the underlying driver implementation and |
| the rest of the system. |
| * [tee\_manager](//src/security/bin/tee_manager): Fuchsia - TEE communication |
| stack. Marshals trusted application invocations; handles secure storage RPCs. |
| * [syscall\_checker](//src/security/bin/syscall_checker): Prints whether certain |
| security sensitive system calls are enabled or disabled. Used in manual testing. |