github.com/QubesOS/qubes-antievilmaid commits

anti-evil-maid-boilerplate -> anti-evil-maid-lib

2d3babf20249de5e2fb6dcc54a81de178d4e67c7 authored over 9 years ago by Rusty Bird <[email protected]>

Be less interesting ;)

c6e305d997a35fcd8219f3f7f06848f5eed4a54e authored over 9 years ago by Rusty Bird <[email protected]>

Change fs label prefix to "aem" to allow longer suffixes

ext4 labels can be up to 16 characters long. That leaves only two chars
after "anti-evil-maid", ...

abbab32dfa69cdce3e535489fb440bc9830a294d authored over 9 years ago by Rusty Bird <[email protected]>

anti-evil-maid-install: Make external devices bootable

d9d8f0811e4bbda2d934e693ea60508b3c665999 authored over 9 years ago by Rusty Bird <[email protected]>

Split up anti-evil-maid-removable into functions

3a6319b6692f980be64a88d92f8e79a9a124126c authored over 9 years ago by Rusty Bird <[email protected]>

Factor out getluksuuids function

eac458eafd4172eaa887781ffb0a3a9d401e3c46 authored over 9 years ago by Rusty Bird <[email protected]>

Seal only to the one device used for the failed unseal

d01ec5c36ed8f10c94d7926a4c7fee900a730968 authored over 9 years ago by Rusty Bird <[email protected]>

Crudely namespace library function variables with _

63b25eedb965226d3eaf94dbafe17a53384f51a6 authored over 9 years ago by Rusty Bird <[email protected]>

Factor out a devtomnt function

lsblk hex ecapes some characters (e.g. spaces) with(!) -r but not
without -r, and other characte...

cebc18833c6e7abf70a462512713ab5235e47d3b authored over 9 years ago by Rusty Bird <[email protected]>

Use lsblk's -r in anti-evil-maid-unseal for consistency

d88a61cc0c25d93048be8d47a1cae340400405f1 authored over 9 years ago by Rusty Bird <[email protected]>

Fix saving SRK password when there is no sealed secret yet

When tpm_unsealdata exits prematurely (for example no input file), `tee`
would not write anything.

622ba54ca96c38ee1743c5c32115fda655255b68 authored over 9 years ago by Marek Marczykowski-Górecki <[email protected]>

anti-evil-maid-install: do not fail when device already contains AEM dir

c1ca4f572712b8cab8868750a4ee194f7eca7f8d authored over 9 years ago by Marek Marczykowski-Górecki <[email protected]>

Add info about inserting the AEM device before (implicit) initrd regeneration

d174fcfd05295f93ab86d6b9cb094089c2d4391e authored over 9 years ago by Marek Marczykowski-Górecki <[email protected]>

Fix disabling original tboot grub configuration

1d7eb3d491425531323bc1aee481be46754a64b4 authored over 9 years ago by Marek Marczykowski-Górecki <[email protected]>

Use machine readable ("raw") output of lsblk

Otherwise padding may be misinterpreted by scripts.

dfc00e5868903f9bf37e3b08688b17e5ad5a942e authored over 9 years ago by Marek Marczykowski-Górecki <[email protected]>

Reject suffixes too long for an ext4 label

2e62d2f26b81b7ac8fe7242b5d940981b0b50646 authored over 9 years ago by Rusty Bird <[email protected]>

Always sync system.data, even without sealed secrets

3b8733427c0f5c37f61dd713c28d1089a0964542 authored over 9 years ago by Rusty Bird <[email protected]>

Try to ensure only one AEM device is present

b781d2f34ff996cb751ccf3a2a8b6961fd326e6d authored over 9 years ago by Rusty Bird <[email protected]>

Use only ext4 for the AEM filesystem

efbf7ff3d280ceeb26402855b7bc46a060cec78e authored over 9 years ago by Rusty Bird <[email protected]>

{sysinit -> basic}.target, systemd-remount-fs.service -> local-fs.target

basic.target is soon enough (before the GUI or any of the Qubes stuff
starts, e.g. the USB VM) b...

b9b3dee9eb78d01a7b6ee6cb1f5eaa24f6db25fb authored over 9 years ago by Rusty Bird <[email protected]>

Document caveat about how not-yet-sealed secrets are stored

f47dca188a80b36263709af041b3e7a5c0209d5a authored over 9 years ago by Rusty Bird <[email protected]>

Use subfolders in the repo according to install destination

48e52d1d49f70eb3be34de992bb232e01d2f6234 authored over 9 years ago by Rusty Bird <[email protected]>

Rebase 19_linux_xen_tboot against current 20_linux_xen

c43309d0a0b90368b5b2600c886b9deee55e0522 authored over 9 years ago by Rusty Bird <[email protected]>

Decouple external installations from boot partitions

Move 'dracut --regenerate-all --force', 'grub2-mkconfig', and
chmod -x /etc/grub.d/20_linux_*tbo...

b8e51f3b366ba773854b5b34de589c1770f4569a authored over 9 years ago by Rusty Bird <[email protected]>

Fully automatic resealing

If unsealing fails, and the user chooses to continue the boot process
anyway (so we know they st...

0cf3d82aa9021edc68e6a2f6f30beec533df9c20 authored over 9 years ago by Rusty Bird <[email protected]>

Unify and modernize the anti-evil-maid systemd services

Set the ordering properly using cryptsetup-pre.target, depend on
systemd >= 208-19 to get it.

U...

87dfd2e3418af831b93535722d124d1f9339b833 authored over 9 years ago by Rusty Bird <[email protected]>

Use strict shell error checking

With so many changes, it's probably a good idea to switch
anti-evil-maid-unseal to 'set -e -o pi...

da82293ce8851309040dcf4afa107b36d10ab9e1 authored over 9 years ago by Rusty Bird <[email protected]>

Spell it anti-evil-maid (with dashes) pretty much everywhere

These different conventions were such a drag. Now the only remaining
instances of the antievilma...

85316e24c0f3e5f05f5f78955889bbe76103630e authored over 9 years ago by Rusty Bird <[email protected]>

Remove custom timeout code

For the exotic case of a completely missing LUKS device, use the
standard systemd timeout (90 se...

1bf28ab806946333db617b87ca2c4e8c23d1571f authored over 9 years ago by Rusty Bird <[email protected]>

Clear the terminal even if Plymouth is active

Always invoke 'clear' to hide the secret, because Plymouth can be active
and yet display the con...

bd521f7f598eaa25283263950c7a6faa0c25e7af authored over 9 years ago by Rusty Bird <[email protected]>

Factor out duplicated code

- Common variables

- Plymouth detection

- The waitfor function (which replaces all the "wait f...

8cea124dacd34d31bc64072d30e0cb39cd4727fa authored over 9 years ago by Rusty Bird <[email protected]>

Shorten some long lines

67ace87ddbf044919defadec50c6f25531cffa51 authored over 9 years ago by Rusty Bird <[email protected]>

Now that we have lsblk...

c1dca642d5609e93330376bda9f483fbfc9018af authored over 9 years ago by Rusty Bird <[email protected]>

Make rd.antievilmaid.dontforcestickremoval flag unnecessary

Automatically decide if the user should remove an AEM partition's
device, by applying the follow...

7e62f5c1617235a80f4080b02127ede6360a3dc6 authored over 9 years ago by Rusty Bird <[email protected]>

Make rd.antievilmaid.asksrkpassword flag unnecessary

Remove the last of the $GRUB_CMDLINE_AEM_FLAGS by automatically
detecting SRK passwords.

f5072ec3fbf8e99370ac670e57fdc3fd4c88bb23 authored over 9 years ago by Rusty Bird <[email protected]>

Merge anti-evil-maid with anti-evil-maid-dracut

So code can easily be shared between them without a very messy
dependency situation, especially ...

727044e61f179dd7483aa963050334c3333dddd2 authored over 9 years ago by Rusty Bird <[email protected]>

Make things work with multiple uniquely labeled AEM devices

Naming convention: AEM devices' labels *begin with* antievilmaid but can
have an optional suffix...

0ebe8dc5d5f7ceec6cd75e6240d6c549501e3295 authored over 9 years ago by Rusty Bird <[email protected]>

Move /usr/lib/antievilmaid/* to standard locations

Install antievilmaid_install to /usr/sbin
Install README to /usr/share/doc/antievilmaid

7948724421c46f5d42c085e1b449e53601a4b011 authored over 9 years ago by Rusty Bird <[email protected]>

Add antievilmaid_seal sealing script

dfcf976056c8096316c24d3cff7c5fa1d0fda1dc authored over 9 years ago by Rusty Bird <[email protected]>

Delete custom udev rule, use /dev/disk/by-label instead

dee7e5d2db5f733e5024388014572cf172124d97 authored over 9 years ago by Rusty Bird <[email protected]>

Make rd.antievilmaid.png_secret flag unnecessary

If secret.png.sealed exists and Plymouth is active, then show the image.
Otherwise, use secret.t...

4b89fafd60789d9546835982ffc2ac43192aae36 authored over 9 years ago by Rusty Bird <[email protected]>

Make AEM compatible with portable installations

e340e80b4d5f5d0ebeb4138c56710b36a8c3b388 authored over 9 years ago by Rusty Bird <[email protected]>

Indent code, sort dependencies

de2b9f180c4c8362bd3b1e6fe14ef52da84238c7 authored over 9 years ago by Rusty Bird <[email protected]>

Add trousers-changer package

This wrapper package moves the trousers data files from /var/lib/tpm to
/var/lib/tpms/<hex(sha25...

d0620bc843136c3f6be6b298b5fa016de12551a7 authored over 9 years ago by Rusty Bird <[email protected]>

Reformat Makefile.builder

bef5fece9a6e87098b6403c78ae2963713e84da1 authored over 9 years ago by Rusty Bird <[email protected]>

Remove unused dependencies; remove wrong -o(ptional) flags

77d8493edc80aeb2bc05911a5478bd004ae4b6a9 authored over 9 years ago by Rusty Bird <[email protected]>

Make names inside repo identical to names inside initrd

e787fab085aa61c4c6eecad8a126711187f4fd5c authored over 9 years ago by Rusty Bird <[email protected]>

Move anti-evil-maid's files into subdir, rename spec to match package name

ad738208ce708bafd03f2109efaf5c2628719b96 authored over 9 years ago by Rusty Bird <[email protected]>

Move tpm-extra's files into subdir

60bfdae30490d8978790314db84406a52eb14755 authored over 9 years ago by Rusty Bird <[email protected]>

Remove orphaned build infrastructure

d031a0bd1a4a1af0e102a8df8d446203ab8d5775 authored over 9 years ago by Rusty Bird <[email protected]>

Rename anti-evil-maid-dracut's subdir and spec to match package name

5edee3e1c00a462ad7ee20aa1dd6a5e06e1368a1 authored over 9 years ago by Rusty Bird <[email protected]>

AEM doesn't implement SRTM anymore

5328f7b9a85739f5544db628b1ce944bb719b358 authored over 9 years ago by Rusty Bird <[email protected]>

version 2.0.12

9b4d3f2855ce361ae0174e1b80b130546f7a49c1 authored over 9 years ago by Marek Marczykowski-Górecki <[email protected]>

Make check-mount-devs.sh executable

Neither the rpm spec nor dracut's inst_script made the file executable,
so anti-evil-maid-check-...

1d9afe07e6a7fc0c485a1d764d3ec1251d324217 authored over 9 years ago by Rusty Bird <[email protected]>

version 2.0.11

908fbaab373d3df81ac2184197c9337a552c97a6 authored over 9 years ago by Marek Marczykowski-Górecki <[email protected]>

check if root device indeed is on the crypt device

Otherwise attacker could provide similar (in terms of filesystem UUID,
LVM volume group etc) une...

e53dab89ae805f8d6a4d1ad1d1f1d7bdd2e8cd99 authored over 9 years ago by Marek Marczykowski-Górecki <[email protected]>

Spelling fixes and updated commit URL (now on GitHub).

0527fe0babfe9626d17ea526604af48dcb0c7e7b authored over 9 years ago by Robin Schneider <[email protected]>

version 2.0.10

abbf020bd44cb26feb7c447332636e1dc2753b70 authored over 9 years ago by Marek Marczykowski-Górecki <[email protected]>

Include LUKS header in measurements (PCR 13)

Add detection of LUKS header modifications by extending PCR 13 with its
hash. Only volumes liste...

b8285dfef922b4a3125b10504e993b631c4f3389 authored over 9 years ago by Marek Marczykowski-Górecki <[email protected]>

gitignore

f1631a01430d17688dba19db1bb60e545f59b929 authored over 9 years ago by Marek Marczykowski-Górecki <[email protected]>

version 2.0.9

19a863b7fc6a950f3918f2d7828dfb1679eb8cec authored over 9 years ago by Marek Marczykowski-Górecki <[email protected]>

Clear secret in console mode

Also, use <ENTER> instead of <SPACE> to continue in the case of
dontforcestickremoval: It's easi...

3696746270cb698a17eac69366b77479c3aff717 authored over 9 years ago by Rusty Bird <[email protected]>

Merge two blocks with the same if/else conditions

2b011a4e8a062f4b75d74809ec42be4283bfe98a authored over 9 years ago by Rusty Bird <[email protected]>

Fix typo

75fc9aa03e25419c1a7b23c990abc98019e04425 authored over 9 years ago by Rusty Bird <[email protected]>

Abort if mount fails

afcb205ecd2277cf03ad0d6a417a714014e62e28 authored over 9 years ago by Rusty Bird <[email protected]>

More variables; abort if copying TPM system.data fails

4981bfb6ba92de47fd6816ae0d9d80183ac1f5b7 authored over 9 years ago by Rusty Bird <[email protected]>

Don't use the ask_for_password wrapper

tpm_unsealdata has its own password prompt when in console mode, don't
wrap another one around i...

7e0ecc35ad75026be2a91167df7ff27a76ee39bb authored over 9 years ago by Rusty Bird <[email protected]>

A nicer way to work both with and without plymouth

aa698174964f7da5eccceb36c623163165fc306b authored over 9 years ago by Rusty Bird <[email protected]>

Distinguish anti-evil-maid-{console,plymouth}.service in the journal

854028753ce66d2ef4a9129681edf13d9267a9c4 authored over 9 years ago by Rusty Bird <[email protected]>

version 2.0.8

173561fc9b2939b7d77be626894581c2e057f984 authored over 9 years ago by Marek Marczykowski-Górecki <[email protected]>

Merge remote-tracking branch 'qubesos/pr/4'

Clear the secret etc. even in the dontforcestickremoval case (when it makes sense)
More precise ...

2642a154114d2cdd2ca89bc2204b163ada1c4374 authored over 9 years ago by Marek Marczykowski-Górecki <[email protected]>

Merge remote-tracking branch 'qubesos/pr/3'

* qubesos/pr/3:
Document GRUB_CMDLINE_TBOOT in README
Add GRUB_CMDLINE_TBOOT grub variable

179fda938219f151c35689fa7fc744b85d249d9d authored over 9 years ago by Marek Marczykowski-Górecki <[email protected]>

Merge remote-tracking branch 'qubesos/pr/2'

* qubesos/pr/2:
Avoid storing secrets in the shell history
Note about '-z' vs. SRK passwords...

a579d4561bbb02f5f94520ddf83b82d82da868eb authored over 9 years ago by Marek Marczykowski-Górecki <[email protected]>

Merge remote-tracking branch 'qubesos/pr/1'

* qubesos/pr/1:
(3/3) Do the right thing when installing to the internal boot partition
(2/3...

438831da187eaa022573ba6ad2f70a6970060a78 authored over 9 years ago by Marek Marczykowski-Górecki <[email protected]>

Document GRUB_CMDLINE_TBOOT in README

996bc22f6faa6ceeede062ee14ea82bf5a14f3d8 authored over 9 years ago by Rusty Bird <[email protected]>

(2/3) Do the right thing when installing to the internal boot partition

This commit only indents the code that will be treated conditionally in
the next commit. 'git lo...

bdf596afd1067a513c909a255aafc4e3b82dd8af authored over 9 years ago by Rusty Bird <[email protected]>

(3/3) Do the right thing when installing to the internal boot partition

6e12384ac0ad882521bdceda7d7cd7217b6b65e9 authored over 9 years ago by Rusty Bird <[email protected]>

(1/3) Do the right thing when installing to the internal boot partition

This commit only adds the code to detect internal/external installation
mode, but does not use i...

fe08814a834b5c4041bb1e89578fce49a08125a2 authored over 9 years ago by Rusty Bird <[email protected]>

Distinguish disk password entry and boot process continuation

The user instructions (and the script's logic) are complicated by the
implementation detail that...

1824b4d659e4005f995de38b4fb5fd9e62bdcccf authored over 9 years ago by Rusty Bird <[email protected]>

Move code to where it's really necessary

c74eec07a22b531ba9982f69599b390bf0253a11 authored over 9 years ago by Rusty Bird <[email protected]>

Move code around

d7a44d92a67b6802e504d48e2cd4b9a86b8177aa authored over 9 years ago by Rusty Bird <[email protected]>

Reformat long comment; remove commented out code

4503e6b1bdc3bcf6b6ff01c30cfc583f149fc57b authored over 9 years ago by Rusty Bird <[email protected]>

Use consistent terminology

bae8cba6ac18501802f37b8258f26cb469fd5dbe authored over 9 years ago by Rusty Bird <[email protected]>

Factor out the unseal command

d58e493151599143086d7df8763aec7b55b6fa41 authored over 9 years ago by Rusty Bird <[email protected]>

ask_for_password is a function

8c5c89240dfc80aa12c925d2d612c9966f65d0ed authored over 9 years ago by Rusty Bird <[email protected]>

Clear secret etc. even in the dontforcestickremoval case

ac42ffba4df16b52ffc7624639231637a2ce6084 authored over 9 years ago by Rusty Bird <[email protected]>

Put paths in variables, use same location for unsealed .txt and .png

64e166ac2164db9dfd8617921e1bbb6ba6ea6be4 authored over 9 years ago by Rusty Bird <[email protected]>

Add and use plymouth_maybe aliases

360021b0c524e1a3abbb2aa818e8edb1cd7fbc55 authored over 9 years ago by Rusty Bird <[email protected]>

Clear plymouth messages automatically at the end

Implemented using an array, so put bash in the shebang. There's a
preexisting bashism in this sc...

38cbe61d8465f2567b364ab6dbf45a5c3fa8c3fc authored over 9 years ago by Rusty Bird <[email protected]>

Fix typos and stray tabs

1a3e5ca9b193221a94bb719bf685764a07d1b887 authored over 9 years ago by Rusty Bird <[email protected]>

Add GRUB_CMDLINE_TBOOT grub variable

http://thread.gmane.org/gmane.comp.boot-loaders.tboot.devel/610/focus=611

6072f35170b6f9e34f878d2c1c306c95b983ccec authored over 9 years ago by Rusty Bird <[email protected]>

Avoid storing secrets in the shell history

cfabb4c57c2a68525ad4adbb64f90774c7717cb1 authored over 9 years ago by Rusty Bird <[email protected]>

Note about '-z' vs. SRK passwords in the sealing step

36901ddfc5822ee2e9fee9615ce4055dba7a5a6e authored over 9 years ago by Rusty Bird <[email protected]>

Remove typos

f64bdfce3465d5d6503fff7f056a3a9adb2c3ae1 authored over 9 years ago by Rusty Bird <[email protected]>

tcsd must be started again after reboot

ffaa70c4634c8a882d317f4eef7247905d4ffa5e authored over 9 years ago by Rusty Bird <[email protected]>

Add command for installing the anti-evil-maid package

0648ec746ee6e70c5b10b8a9a7d220c86d9ad5f6 authored over 9 years ago by Rusty Bird <[email protected]>

version 2.0.7

51e685cc39ae530709305eaa3b76b7dc01dac95e authored over 10 years ago by Marek Marczykowski-Górecki <[email protected]>

Some more fixes for plymouth-less mode

297a0e64358e277323e2d62f25bc7869591e46fa authored over 10 years ago by Marek Marczykowski-Górecki <[email protected]>

Fix PNG secret image path (#893)

20746e5f5824ff9b7cb78a572cf96228afc08789 authored over 10 years ago by Marek Marczykowski-Górecki <[email protected]>

Support both plymouth and non-plymouth boot modes

59051ae248f552230d757cb842e37bc1e25ce9ba authored over 10 years ago by Marek Marczykowski-Górecki <[email protected]>

Ecosyste.ms: OpenCollective

github.com/QubesOS/qubes-antievilmaid