| #!/bin/bash |
| |
| # For the license, see the LICENSE file in the root directory. |
| #set -x |
| |
| ROOT=${abs_top_builddir:-$(pwd)/..} |
| TESTDIR=${abs_top_testdir:-$(dirname "$0")} |
| |
| VTPM_NAME="vtpm-test-tpm-probe" |
| SWTPM_DEV_NAME="/dev/${VTPM_NAME}" |
| TPM_PATH="$(mktemp -d)" || exit 1 |
| STATE_FILE=$TPM_PATH/tpm-00.permall |
| VOLATILE_STATE_FILE=$TPM_PATH/tpm-00.volatilestate |
| SWTPM_INTERFACE=${SWTPM_INTERFACE:-cuse} |
| SWTPM_CMD_UNIX_PATH=${TPM_PATH}/unix-cmd.sock |
| SWTPM_CTRL_UNIX_PATH=${TPM_PATH}/unix-ctrl.sock |
| |
| function cleanup() |
| { |
| pid=${SWTPM_PID} |
| if [ -n "$pid" ]; then |
| kill_quiet -9 "$pid" |
| fi |
| rm -rf "$TPM_PATH" |
| } |
| |
| trap "cleanup" EXIT |
| |
| [ "${SWTPM_INTERFACE}" == "cuse" ] && source "${TESTDIR}/test_cuse" |
| source "${TESTDIR}/common" |
| |
| rm -f "$STATE_FILE" "$VOLATILE_STATE_FILE" 2>/dev/null |
| |
| TPM_PATH=$TPM_PATH run_swtpm "${SWTPM_INTERFACE}" |
| |
| display_processes_by_name "$SWTPM" |
| |
| if ! kill -0 "${SWTPM_PID}"; then |
| echo "Error: ${SWTPM_INTERFACE} TPM did not start." |
| exit 1 |
| fi |
| |
| # Before TPM_INIT: Read PCR 17 -- this gives a TPM_FAIL |
| RES=$(swtpm_cmd_tx "${SWTPM_INTERFACE}" '\x00\xC1\x00\x00\x00\x0E\x00\x00\x00\x15\x00\x00\x00\x11') |
| exp=' 00 c4 00 00 00 0a 00 00 00 09' |
| if [ "$RES" != "$exp" ]; then |
| echo "Error: Before TPM_INIT: Did not get expected result from TPM_PCRRead(17)" |
| echo "expected: $exp" |
| echo "received: $RES" |
| exit 1 |
| fi |
| |
| # Init the TPM |
| run_swtpm_ioctl "${SWTPM_INTERFACE}" -i |
| |
| # Read PCR 17 -- this should give TPM_INVALID_POSTINIT |
| RES=$(swtpm_cmd_tx "${SWTPM_INTERFACE}" '\x00\xC1\x00\x00\x00\x0E\x00\x00\x00\x15\x00\x00\x00\x11') |
| exp=' 00 c4 00 00 00 0a 00 00 00 26' |
| if [ "$RES" != "$exp" ]; then |
| echo "Error: Did not get expected result from TPM_PCRRead(17)" |
| echo "expected: $exp" |
| echo "received: $RES" |
| exit 1 |
| fi |
| |
| if ! check_seccomp_profile "${SWTPM_EXE}" "${SWTPM_PID}" 2; then |
| exit 1 |
| fi |
| |
| if ! run_swtpm_ioctl "${SWTPM_INTERFACE}" -s; then |
| echo "Error: Could not shut down the ${SWTPM_INTERFACE} TPM." |
| exit 1 |
| fi |
| |
| if wait_process_gone "${SWTPM_PID}" 4; then |
| echo "Error: ${SWTPM_INTERFACE} TPM should not be running anymore." |
| exit 1 |
| fi |
| |
| echo "OK" |
| |
| exit 0 |