tree 25bb7bed1c0e2800b63a4b27147c4a1c401c0ba4
parent 09d02f87cf3e976a97010baede551d342325f239
author Adrian Ambrożewicz <adrian.ambrozewicz@linux.intel.com> 1578937966 +0100
committer Agata Olender <agata.olender@intel.com> 1585640472 +0000

    Authentication support for Legacy mode

    This change introduces new 'Mount' API argument - UNIX_FD for unnamed pipe.
    This unnamed pipe is utilized to securely send secret data over D-Bus.
    Currently data consists of null-terminated char buffers with username and
    password, that are passed as InsertMedia action parameters.

    Data on receiving side is encapsulated into classes whose role is to:
    - keep secret as short-lived as possible
    - erase secret from memory when it's not needed
    - pass secrets (and format them) to another secure container with above
      capabilities

    New classes:
    - Credentials: is a class encapsulating login and password. It zeroes them
      at destruction.
    - CredentialProvider: contains Credentials, specifies SecureBuffer, allows
      to store credentials in SecureBuffer

    New behavior:
    - When credentials are provided they are encapsulated as char array of two
      null-terminated strings
    - Pipe is opened as a medium to send this buffer
    - UNIX_FD of the pipe source is passed in ‘Mount’ call. Virtual-Media
      service reads from credentials over the pipe

    Tested:
    Manual and automated tests:
    - positive and negative tests for authentication on both CIFS and HTTPS
      resources
    - error injection (ill-formed data transfered over pipe, pipe broken etc.)

Signed-off-by: Agata Olender <agata.olender@intel.com>
Change-Id: I5b330b18c4bff222eab3062abfe27b5adaebf877