system_core/libkeyutils, branch replicant-10 Fork of system/core Initialize fs-verity keys in shell script 2019-03-22T16:18:00+00:00 Victor Hsieh victorhsieh@google.com 2019-03-20T22:52:45+00:00 59183120c29e5e2747222b24de09484b7cd8cf17 This gives us two benefits: - Better compatibility to keyctl(1), which doesn't have "dadd" - Pave the way to specify key's security labels, since keyctl(1) doesn't support, and we want to avoid adding incompatible option. Test: See keys loaded in /proc/keys Bug: 128607724 Change-Id: Ia45f6e9dea80d037c0820cf1fd2bc9d7c8bb6302 
This gives us two benefits:
  - Better compatibility to keyctl(1), which doesn't have "dadd"
  - Pave the way to specify key's security labels, since keyctl(1)
    doesn't support, and we want to avoid adding incompatible option.

Test: See keys loaded in /proc/keys
Bug: 128607724
Change-Id: Ia45f6e9dea80d037c0820cf1fd2bc9d7c8bb6302
mini-keyctl: use ParseInt to parse keys 2019-03-18T20:57:05+00:00 Victor Hsieh victorhsieh@google.com 2019-03-18T20:49:02+00:00 0fb290bb8aa46b6cb5e8790be7fbcec0a00876a9 - Valid ID format examples: 0x90a, 123 - ID like 90a will not work now. Bug: None Test: mini-keyctl unlink 0x11d25c86 0x2873c96d Change-Id: I057bce0a49a60f475d54b23e28dc18db25124466 
- Valid ID format examples: 0x90a, 123
 - ID like 90a will not work now.

Bug: None
Test: mini-keyctl unlink 0x11d25c86 0x2873c96d

Change-Id: I057bce0a49a60f475d54b23e28dc18db25124466
mini-keyctl cleanup: keep local funcitons static 2019-03-18T16:45:12+00:00 Victor Hsieh victorhsieh@google.com 2019-03-15T18:36:39+00:00 582c7b9b829b3fe5b2b28efe3cb729d4fca76900 Test: build Bug: None Change-Id: If58f496173d8afff9eb81ff7f5975ddaac765d18 
Test: build
Bug: None
Change-Id: If58f496173d8afff9eb81ff7f5975ddaac765d18
mini-keyctl: support printing security label 2019-03-15T23:01:01+00:00 Victor Hsieh victorhsieh@google.com 2019-03-15T18:35:45+00:00 327037f06363532c8cff79c7e6b1f64f4de9119c Test: mini-keyctl security <key_id> Bug: 128607724 Change-Id: If92b41d0aa96d626933546391b964ca2a8a48703 
Test: mini-keyctl security <key_id>
Bug: 128607724
Change-Id: If92b41d0aa96d626933546391b964ca2a8a48703
Change mini-keyctl command format. 2019-03-08T17:59:42+00:00 Xiaoyong Zhou xzhou@google.com 2019-03-08T17:59:42+00:00 b29b27ec7f47bde45ee65752cb218d6f7a0860d6 This CL change the mini-keyctl tool to make it compitable with libkeyctl tool to make it more useful. Bug: 112038861 Test: mini-keyctl padd asymmetric 'desc' .fs-verity < /path/to/cert.der Test: mini-keyctl unlink <key_id> <keyring_id> Test: mini-keyctl restrict_keyring <keyring_id> Change-Id: I950f07c7718f173823ce5a5cd08e0d1a0e23a007 
This CL change the mini-keyctl tool to make it compitable with libkeyctl
tool to make it more useful.

Bug: 112038861
Test: mini-keyctl padd asymmetric 'desc' .fs-verity < /path/to/cert.der
Test: mini-keyctl unlink <key_id> <keyring_id>
Test: mini-keyctl restrict_keyring <keyring_id>

Change-Id: I950f07c7718f173823ce5a5cd08e0d1a0e23a007
Add a tool to add keys to keyring. 2019-01-30T21:08:31+00:00 Xiaoyong Zhou xzhou@google.com 2019-01-29T23:53:21+00:00 4a5c352e6dba774495aed1f9cd641846b0f8be94 This CL adds a binary to load keys to a keyring. Bug: 112038861 Test: mini-keyctl -k .fsverity -c PATH_CONTAINER_CERTS Test: cat /proc/keys and find the newly added keys Change-Id: Iead68618ea194e9412616c5c6cff885e3cf78520 
This CL adds a binary to load keys to a keyring.

Bug: 112038861
Test: mini-keyctl -k .fsverity -c PATH_CONTAINER_CERTS
Test: cat /proc/keys and find the newly added keys
Change-Id: Iead68618ea194e9412616c5c6cff885e3cf78520
Build adbd for recovery 2018-05-24T05:11:11+00:00 Jiyong Park jiyong@google.com 2018-05-24T05:11:00+00:00 a0e75045e6817a51e4e6b05880d871525a4d52fe adbd (and its dependencies) are marked as recovery_available:true so that recovery version of the binary is built separately from the one for system partition. This allows us to stop copying the system version to the recovery partition and also opens up the way to enable shared libraries in the recovery partition. Then we can also build adbd as a dynamic executable. Bug: 79146551 Test: m -j adbd.recovery Change-Id: Ib95614c7435f9d0afc02a0c7d5ae1a94e439e32a 
adbd (and its dependencies) are marked as recovery_available:true so
that recovery version of the binary is built separately from the one for
system partition. This allows us to stop copying the system version to
the recovery partition and also opens up the way to enable shared
libraries in the recovery partition. Then we can also build adbd as a
dynamic executable.

Bug: 79146551
Test: m -j adbd.recovery
Change-Id: Ib95614c7435f9d0afc02a0c7d5ae1a94e439e32a
Add test_suites lines. 2018-04-27T23:12:06+00:00 Elliott Hughes enh@google.com 2018-04-27T23:12:06+00:00 40fdf3f4ab587f01d95b2ec119d817499b0edece Bug: N/A Test: builds Change-Id: Ic5e2b9206bcfcb53c774989013b5db6aab462e42 
Bug: N/A
Test: builds
Change-Id: Ic5e2b9206bcfcb53c774989013b5db6aab462e42
Add libkeyutils. 2017-05-10T21:53:28+00:00 Elliott Hughes enh@google.com 2017-05-10T00:09:06+00:00 1eeee966763d05c9710188542d1ca84e08fbb397 Also move init over to it. Bug: http://b/37991155 Test: builds+boots Change-Id: I5113a9d96a5ce0a0f3bad71134d6cc4f7b41a57e 
Also move init over to it.

Bug: http://b/37991155
Test: builds+boots
Change-Id: I5113a9d96a5ce0a0f3bad71134d6cc4f7b41a57e