| commit | 387a6191f225335caa052522b4774cdb70853189 | [log] [tgz] |
|---|---|---|
| author | Zhichuang Sun <zhichuang@google.com> | Wed Jul 19 15:48:03 2023 -0700 |
| committer | Patrick Williams <patrick@stwcx.xyz> | Thu Feb 29 02:30:46 2024 +0000 |
| tree | a4497cb6c319221266271612a0fccd5e0179911f | |
| parent | abec9d549a9fa5aa4cf3d0f767534a5874658f4b [diff] |
Add Attestation related D-bus Interface Attestation provides critical and pertinent security information about a specific device, system, software element, or other managed entity. Three relevant interfaces are defined as below. ComponentIntegrity describes integrity of a component, including what protocol used to measure the integrity, when was the integrity info last updated, whether the integrity measurement is enabled, etc. Some associations have been added to this interface, including a link to the trusted component that the integrity object is reporting, and a link to the systems that the integrity object is protecting. IdentityAuthentication describes the identity verification status. It also has two associations defined, one is a link to the requester's certificate, the other one for the responder. MeasurementSet defines the dbus method to get SPDM measurements. These three interfaces are grouped under a new directory Attestation as they are used to expose identity/integrity/measurement information for an attestation. Signed-off-by: Zhichuang Sun <zhichuang@google.com> Change-Id: Iac86dfc63c85af04985a61ba52161301134e8f2b
YAML descriptors of standard D-Bus interfaces. The format is described by the sdbusplus binding generation tool sdbus++.
Before defining a new D-Bus interface or modifying an existing one, please read through the documented set of the common requirements and expectations.
This project can be built with meson. The typical meson workflow is: meson builddir && ninja -C builddir.
The meson files used to handle the YAML files are automatically generated and found under the gen subdirectory. When adding or removing YAML files, this must be regenerated. This can be done with the helper script found in the gen subdirectory: cd gen && ./regenerate-meson.
Only the xyz/openbmc_project and org/freedesktop interfaces are built by default. Other interfaces can be enabled by meson options:
-Ddata_com_ibm=true-Ddata_org_open_power=trueExample: meson builddir -Ddata_com_ibm=true && ninja -C builddir