Updates of Open Platform Trust Services Wiki http://sourceforge.jp/projects/openpts/wiki/!feeds/diff SourceForge.jp Wiki page updates for Open Platform Trust Services project. 2011-05-06T16:09:50+09:00 FrontPage http://sourceforge.jp/projects/openpts/wiki/FrontPage FrontPage 2011-05-06T16:09:50+09:00 (by munetoh)

@@ -7,24 +7,28 @@
 Previous version : [OpenPlatformTrustServices-0.1]
 
 ==== 1.1. Supported Features ====
 
-Version 0.2.3 supports the following features,
+Version 0.2.4 supports the following features,
 
   * Reference Manifest(RM) generation from Integrity Measurement Log (IML)
   * Integrity Report(IR) generation from Integrity Measurement Log (IML)
   * Verification Result (VR) generation from IR and VR
   * Validation engine based on Finite State Machine 
   * Behavior Models of Platform (BIOS) and Runtime (OS)
-  * Standalone attestation by IF-M with SSH tunnel.
+  * Standalone attestation by IF-M with SSH remote command execution. - new
   * AIDE integration  (experimental)
   * TNC (experimental)
+  * tboot (experimental) - new
+
+Deprecated features,
+  * Standalone attestation by IF-M with SSH tunnel.
+
 
 ==== 1.2. Planned Features ====
   
   * XML Signature
   * Integrity Database
-  * tboot
 
 ==== 1.3. Supported Trusted Computing Platform List ====
 
 
@@ -36,16 +40,17 @@
 || Panasonic|| Lets's Note || ||
 
 ==== 1.3.2. Runtime (O/S) ====
 
-|| '''Name'''  ||  '''Status''' || '''Comments''' ||
-|| Fedora12-14 ||  || ||
-|| RHEL6             ||  || ||
-|| Ubuntu 10.04 || || ||
+|| '''Name'''   ||  '''Status''' || '''Comments''' ||
+|| Fedora12-14  ||  || ||
+|| Fedora15     ||  || with tboot-20101005 ||
+|| RHEL6        ||  || ||
+|| Ubuntu 10.04 ||  || ||
 
 === 2. User's Guide ===
 
-[http://sourceforge.jp/projects/openpts/wiki/FrontPage/attach/userguide-0.2.3-OSS.pdf User's Guide v0.2.3][[BR]]
+[http://sourceforge.jp/projects/openpts/downloads/51879/userguide-0.2.4.pdf  User's Guide v0.2.4][[BR]]
 
 [http://sourceforge.jp/projects/openpts/wiki/FrontPage/attach/20080218-TPMv12ErrorCodeCheatSheet.pdf TPM v1.2 Error Code Cheat Sheet][[BR]]
 [http://sourceforge.jp/projects/openpts/wiki/FrontPage/attach/20080218-TSSv12ErrorCodeCheatSheet.pdf TSS v1.2 Error Code Cheat Sheet][[BR]]
]]> FrontPage http://sourceforge.jp/projects/openpts/wiki/FrontPage FrontPage 2011-03-10T17:15:27+09:00 (by munetoh)

@@ -43,9 +43,9 @@
 || Ubuntu 10.04 || || ||
 
 === 2. User's Guide ===
 
-[http://sourceforge.jp/projects/openpts/wiki/FrontPage/attach/userguide-0.2.3.pdf User's Guide v0.2.3][[BR]]
+[http://sourceforge.jp/projects/openpts/wiki/FrontPage/attach/userguide-0.2.3-OSS.pdf User's Guide v0.2.3][[BR]]
 
 [http://sourceforge.jp/projects/openpts/wiki/FrontPage/attach/20080218-TPMv12ErrorCodeCheatSheet.pdf TPM v1.2 Error Code Cheat Sheet][[BR]]
 [http://sourceforge.jp/projects/openpts/wiki/FrontPage/attach/20080218-TSSv12ErrorCodeCheatSheet.pdf TSS v1.2 Error Code Cheat Sheet][[BR]]
]]> FrontPage http://sourceforge.jp/projects/openpts/wiki/FrontPage FrontPage 2011-03-10T16:20:38+09:00 (by munetoh)

@@ -1,126 +1,57 @@
-== Open Platform Trust Services (PTS) ==
+== Open Platform Trust Services (PTS) version 0.2 ==
 
 === 1. Overview ===
 
-Open Platform Trust Services is a proof-of-concept (PoC) and reference implementation of Platform Trust Services (PTS) which is defined by the Trusted Computing Group.
+Open Platform Trust Services is a proof-of-concept (PoC) and experimental implementation of Platform Trust Services (PTS) which is defined by the Trusted Computing Group (TCG). From version 0.2, it is fully written in C to support many type of target platforms, include PC, server and embedded devices.
 
- PTS related TCG specifications as of 2007/08
-  1. Architecture Part II - Integrity Management Version 1.0, Rev. 1.0
-  1. Platform Trust Services Interface Specification (IF-PTS), Version 1.0, Rev 1.0
-  1. Core Integrity Schema Specification, Version 1.0.1, Rev 1.0
-  1. Simple Object Schema Specification Version 1.0, Rev. 1.0
-  1. Security Qualities Schema Specification Version 1.1, Revision 7 
-  1. Reference Manifest (RM) Schema Specification Version 1.0, Rev. 1.0
-  1. Integrity Report Schema Specification Version 1.0, Rev. 1.0
-  1. Verification Result Schema Specification Version 1.0, Revision 1.0
+Previous version : [OpenPlatformTrustServices-0.1]
 
 ==== 1.1. Supported Features ====
+
+Version 0.2.3 supports the following features,
 
   * Reference Manifest(RM) generation from Integrity Measurement Log (IML)
   * Integrity Report(IR) generation from Integrity Measurement Log (IML)
-  * Verification Result (VR) generation drom IR and VR
-  * Integrity Information Database (for !RedHat,CentOS,KNOPPIX,Ubuntu)
-  * Vulnerability Information Database (OVAL,CVE,DSA)
+  * Verification Result (VR) generation from IR and VR
   * Validation engine based on Finite State Machine 
-  * Behabior Models of Platform (BIOS) and Runtime (OS)
+  * Behavior Models of Platform (BIOS) and Runtime (OS)
+  * Standalone attestation by IF-M with SSH tunnel.
+  * AIDE integration  (experimental)
+  * TNC (experimental)
 
 ==== 1.2. Planned Features ====
   
   * XML Signature
-  * 
-
+  * Integrity Database
+  * tboot
 
 ==== 1.3. Supported Trusted Computing Platform List ====
 
-This pts use two integrity manifest, platform and runtime.
-The platform manifest covers BIOS integrity. As it stands, no PC BIOS vender provides a manifest. thus we create the manifest from existing PC BIOS,
-The eventlog is stored at ACPI Table and Linux Kenrel supports to access that. 
 
-The runtime manifest will cover Bootloader, Operating System and Virtual Machine Monitor.
-
-
-==== 1.3.1. Platform Infomation (BIOS) ====
+==== 1.3.1. Platform (BIOS) ====
 
 || '''Vendor''' ||  '''Type''' || '''Comments''' ||
-|| Lenovo  || Thinkpad X60,X61,T60,T61 etc || pls. update the BIOS ||
-|| Panasonic|| W7,Y7, etc || ||
+|| Lenovo  || Thinkpad ||  ||
+|| IBM  || System X server ||  ||
+|| Panasonic|| Lets's Note || ||
 
- For more detail, See the table at PlatformInfo PlatformBiosInt1AhInfo
+==== 1.3.2. Runtime (O/S) ====
 
-==== 1.3.2. Runtime Information (O/S) ====
+|| '''Name'''  ||  '''Status''' || '''Comments''' ||
+|| Fedora12-14 ||  || ||
+|| RHEL6             ||  || ||
+|| Ubuntu 10.04 || || ||
 
-|| '''Name''' ||  '''Status''' || '''Comments''' ||
-|| [http://unit.aist.go.jp/itri/knoppix/index.html KNOPPIX511 Trusted Computing Geeks] || VALID || Linux-IMA ||
+=== 2. User's Guide ===
 
-Other Linux based Operating Systems are possible to support. 
+[http://sourceforge.jp/projects/openpts/wiki/FrontPage/attach/userguide-0.2.3.pdf User's Guide v0.2.3][[BR]]
 
-==== 1.4. Demonstration ====
-
-DemoMovie
-
-=== 2. Client Setup Guide ===
-
-=== 2.1. KNOPPIX ===
-
- [http://sourceforge.jp/projects/openpts/wiki/FrontPage/attach/20080225-KNOPPIX511TCG-OPTS-UsersGuide-v1_1-E.pdf How to use OpenPlatformTrustServices with KNOPPIX Trusted Computing Geeks（PDF, English)] [[BR]]
- [http://sourceforge.jp/projects/openpts/wiki/FrontPage/attach/20080225-KNOPPIX511TCG-OPTS-UsersGuide-v1_1-J.pdf KNOPPIX Trusted Computing Geeks でのOpenPlatformTrustServices の使い方 (PDF, 日本語)] [[BR]]
- [TcGeeksQuickSetupGuide KNOPPIX Trusted Computing Geeks Quick Setup Guide] [[BR]]
-
- HowToBuildForKnoppix [[BR]]
- HowToBuildForKnoppix531 (v0.1.2 draft)[[BR]]
-
-=== 3. Server Setup Guide ===
-
- [http://sourceforge.jp/projects/openpts/wiki/FrontPage/attach/20080221-OPTS-ServerSetupGuide-v1_0-J.pdf OpenPlatformTrustServices サーバー構築ガイド v1.0 (PDF, 日本語)] [[BR]]
- [http://sourceforge.jp/projects/openpts/wiki/FrontPage/attach/20080218-OPTS-ServerSetupGuide-v1_0-E.pdf OpenPlatformTrustServices Server Setup Guide v1.0 (PDF, English)] [[BR]]
- OpenPlatformTrustServicesServerSetupGuide (v0.1.2 DRAFT)[[BR]]
-
-=== 4. Reference Manuals ===
-
-==== 4.1. Command Reference ====
-
-ToolsCommandReference[[BR]]
-TcdemoCommandReference[[BR]]
-
-==== 4.2. Cheat Sheets and tips for TC developers ====
 [http://sourceforge.jp/projects/openpts/wiki/FrontPage/attach/20080218-TPMv12ErrorCodeCheatSheet.pdf TPM v1.2 Error Code Cheat Sheet][[BR]]
 [http://sourceforge.jp/projects/openpts/wiki/FrontPage/attach/20080218-TSSv12ErrorCodeCheatSheet.pdf TSS v1.2 Error Code Cheat Sheet][[BR]]
-LinuxDistroComparisonTable[[BR]]
-HackingLinuxTpmDeviceDriver[[BR]]
-
-=== 5. Development ===
-
-||'''Distro'''||'''Release'''||'''bootloader (patch)'''||'''Kernel (patch)'''||
-||CentOS 5   ||            || (grub-ima) || 2.6.18 ||
-||Fedora 7   || 2007/5/31  || (grub-ima) || 2.6.21 ||
-||Fedora 8   || 2007/11/8  || (grub-ima) || 2.6.23 ||
-||Fedora 9   || 2008/5/14  || grub-0.97-33 (grub-ima) || 2.6.25 - 2.6.27.25 (ibm_ima_8.5_2.6.27.6.patch)||
-||Fedora 10  || 2008/11/25 || grub-0.97-38 (grub-0.97-38.fc10.ima-1.1.0.0.patch) || 2.6.27 - 2.6.27.41 (ibm_ima_8.5_2.6.27.6.patch)||
-||Fedora 11  || 2009/6/9   || grub-0.97-50 (grub-ima) || 2.6.29 - 2.6.30.10 (ibm_ima_2.6.29.1.patch) ||
-||Fedora 12  || 2009/11/17 || grub-0.97-60 (grub-ima) || 2.6.31 - 2.6.31.12 (need fix for iTPM)||
-||Ubuntu Hardy    ||2008/4/24 || (grub-ima) || 2.6.24 (ibm_ima_8.3_2.6.24.3.patch)||
-||Ubuntu Intrepid ||2008/10/30|| (grub-0.97-29ubuntu45-ima-1.1.0.0.patch) || 2.6.27 (ibm_ima_8.5_2.6.27.6.patch)||
-||Ubuntu Jaunty   ||2009/4/23 || (grub-0.97-29ubuntu45-ima-1.1.0.0.patch) || 2.6.28 ||
-||Ubuntu Kermic   ||2009/10/29|| N/A (grub2)|| 2.6.31 - 2.6.31-14 ||
-||Ubuntu Lucid    ||2010/4/29 || N/A (grub2)|| ?      ||
-
-==== 5.1. Fedora ====
-
- HowToBuildForRedHat[[BR]]
- HowToBuildForFedora9 (deprecated)[[BR]]
- HowToBuildForFedora10 (draft)[[BR]]
-
-==== 5.2. Ubuntu ====
-
- HowToBuildForUbuntuHardy (deprecated)[[BR]]
- HowToBuildForUbuntuIntrepid (deprecated)[[BR]]
- HowToBuildForUbuntuJaunty (draft)[[BR]]
-==== 5.3. Eclipse ====
 
- EclipseGuide
 
-=== Links and References ===
+=== 3. Links and References ===
 
 [https://www.trustedcomputinggroup.org/home Trusted Computing Group] [[BR]]
 [http://sourceforge.net/projects/trousers TrouSerS(TSS)] [[BR]]
]]> OpenPlatformTrustServices-0.1 http://sourceforge.jp/projects/openpts/wiki/OpenPlatformTrustServices-0.1 OpenPlatformTrustServices-0.1 2011-03-10T15:56:16+09:00 (by munetoh)

@@ -1 +1,126 @@
+== Open Platform Trust Services (PTS) version 0.1 ==
+
+=== 1. Overview ===
+
+Open Platform Trust Services is a proof-of-concept (PoC) and reference implementation of Platform Trust Services (PTS) which is defined by the Trusted Computing Group.
+
+ PTS related TCG specifications as of 2007/08
+  1. Architecture Part II - Integrity Management Version 1.0, Rev. 1.0
+  1. Platform Trust Services Interface Specification (IF-PTS), Version 1.0, Rev 1.0
+  1. Core Integrity Schema Specification, Version 1.0.1, Rev 1.0
+  1. Simple Object Schema Specification Version 1.0, Rev. 1.0
+  1. Security Qualities Schema Specification Version 1.1, Revision 7 
+  1. Reference Manifest (RM) Schema Specification Version 1.0, Rev. 1.0
+  1. Integrity Report Schema Specification Version 1.0, Rev. 1.0
+  1. Verification Result Schema Specification Version 1.0, Revision 1.0
+
+==== 1.1. Supported Features ====
+
+  * Reference Manifest(RM) generation from Integrity Measurement Log (IML)
+  * Integrity Report(IR) generation from Integrity Measurement Log (IML)
+  * Verification Result (VR) generation drom IR and VR
+  * Integrity Information Database (for !RedHat,CentOS,KNOPPIX,Ubuntu)
+  * Vulnerability Information Database (OVAL,CVE,DSA)
+  * Validation engine based on Finite State Machine 
+  * Behabior Models of Platform (BIOS) and Runtime (OS)
+
+==== 1.2. Planned Features ====
+  
+  * XML Signature
+  * 
+
+
+==== 1.3. Supported Trusted Computing Platform List ====
+
+This pts use two integrity manifest, platform and runtime.
+The platform manifest covers BIOS integrity. As it stands, no PC BIOS vender provides a manifest. thus we create the manifest from existing PC BIOS,
+The eventlog is stored at ACPI Table and Linux Kenrel supports to access that. 
+
+The runtime manifest will cover Bootloader, Operating System and Virtual Machine Monitor.
+
+
+==== 1.3.1. Platform Infomation (BIOS) ====
+
+|| '''Vendor''' ||  '''Type''' || '''Comments''' ||
+|| Lenovo  || Thinkpad X60,X61,T60,T61 etc || pls. update the BIOS ||
+|| Panasonic|| W7,Y7, etc || ||
+
+ For more detail, See the table at PlatformInfo PlatformBiosInt1AhInfo
+
+==== 1.3.2. Runtime Information (O/S) ====
+
+|| '''Name''' ||  '''Status''' || '''Comments''' ||
+|| [http://unit.aist.go.jp/itri/knoppix/index.html KNOPPIX511 Trusted Computing Geeks] || VALID || Linux-IMA ||
+
+Other Linux based Operating Systems are possible to support. 
+
+==== 1.4. Demonstration ====
+
+DemoMovie
+
+=== 2. Client Setup Guide ===
+
+=== 2.1. KNOPPIX ===
+
+ [http://sourceforge.jp/projects/openpts/wiki/FrontPage/attach/20080225-KNOPPIX511TCG-OPTS-UsersGuide-v1_1-E.pdf How to use OpenPlatformTrustServices with KNOPPIX Trusted Computing Geeks（PDF, English)] [[BR]]
+ [http://sourceforge.jp/projects/openpts/wiki/FrontPage/attach/20080225-KNOPPIX511TCG-OPTS-UsersGuide-v1_1-J.pdf KNOPPIX Trusted Computing Geeks でのOpenPlatformTrustServices の使い方 (PDF, 日本語)] [[BR]]
+ [TcGeeksQuickSetupGuide KNOPPIX Trusted Computing Geeks Quick Setup Guide] [[BR]]
+
+ HowToBuildForKnoppix [[BR]]
+ HowToBuildForKnoppix531 (v0.1.2 draft)[[BR]]
+
+=== 3. Server Setup Guide ===
+
+ [http://sourceforge.jp/projects/openpts/wiki/FrontPage/attach/20080221-OPTS-ServerSetupGuide-v1_0-J.pdf OpenPlatformTrustServices サーバー構築ガイド v1.0 (PDF, 日本語)] [[BR]]
+ [http://sourceforge.jp/projects/openpts/wiki/FrontPage/attach/20080218-OPTS-ServerSetupGuide-v1_0-E.pdf OpenPlatformTrustServices Server Setup Guide v1.0 (PDF, English)] [[BR]]
+ OpenPlatformTrustServicesServerSetupGuide (v0.1.2 DRAFT)[[BR]]
+
+=== 4. Reference Manuals ===
+
+==== 4.1. Command Reference ====
+
+ToolsCommandReference[[BR]]
+TcdemoCommandReference[[BR]]
+
+==== 4.2. Cheat Sheets and tips for TC developers ====
+[http://sourceforge.jp/projects/openpts/wiki/FrontPage/attach/20080218-TPMv12ErrorCodeCheatSheet.pdf TPM v1.2 Error Code Cheat Sheet][[BR]]
+[http://sourceforge.jp/projects/openpts/wiki/FrontPage/attach/20080218-TSSv12ErrorCodeCheatSheet.pdf TSS v1.2 Error Code Cheat Sheet][[BR]]
+LinuxDistroComparisonTable[[BR]]
+HackingLinuxTpmDeviceDriver[[BR]]
+
+=== 5. Development ===
+
+||'''Distro'''||'''Release'''||'''bootloader (patch)'''||'''Kernel (patch)'''||
+||CentOS 5   ||            || (grub-ima) || 2.6.18 ||
+||Fedora 7   || 2007/5/31  || (grub-ima) || 2.6.21 ||
+||Fedora 8   || 2007/11/8  || (grub-ima) || 2.6.23 ||
+||Fedora 9   || 2008/5/14  || grub-0.97-33 (grub-ima) || 2.6.25 - 2.6.27.25 (ibm_ima_8.5_2.6.27.6.patch)||
+||Fedora 10  || 2008/11/25 || grub-0.97-38 (grub-0.97-38.fc10.ima-1.1.0.0.patch) || 2.6.27 - 2.6.27.41 (ibm_ima_8.5_2.6.27.6.patch)||
+||Fedora 11  || 2009/6/9   || grub-0.97-50 (grub-ima) || 2.6.29 - 2.6.30.10 (ibm_ima_2.6.29.1.patch) ||
+||Fedora 12  || 2009/11/17 || grub-0.97-60 (grub-ima) || 2.6.31 - 2.6.31.12 (need fix for iTPM)||
+||Ubuntu Hardy    ||2008/4/24 || (grub-ima) || 2.6.24 (ibm_ima_8.3_2.6.24.3.patch)||
+||Ubuntu Intrepid ||2008/10/30|| (grub-0.97-29ubuntu45-ima-1.1.0.0.patch) || 2.6.27 (ibm_ima_8.5_2.6.27.6.patch)||
+||Ubuntu Jaunty   ||2009/4/23 || (grub-0.97-29ubuntu45-ima-1.1.0.0.patch) || 2.6.28 ||
+||Ubuntu Kermic   ||2009/10/29|| N/A (grub2)|| 2.6.31 - 2.6.31-14 ||
+||Ubuntu Lucid    ||2010/4/29 || N/A (grub2)|| ?      ||
+
+==== 5.1. Fedora ====
+
+ HowToBuildForRedHat[[BR]]
+ HowToBuildForFedora9 (deprecated)[[BR]]
+ HowToBuildForFedora10 (draft)[[BR]]
+
+==== 5.2. Ubuntu ====
+
+ HowToBuildForUbuntuHardy (deprecated)[[BR]]
+ HowToBuildForUbuntuIntrepid (deprecated)[[BR]]
+ HowToBuildForUbuntuJaunty (draft)[[BR]]
+==== 5.3. Eclipse ====
+
+ EclipseGuide
+
+=== Links and References ===
+
+[https://www.trustedcomputinggroup.org/home Trusted Computing Group] [[BR]]
+[http://sourceforge.net/projects/trousers TrouSerS(TSS)] [[BR]]
]]> HowToBuildForUbuntuJaunty http://sourceforge.jp/projects/openpts/wiki/HowToBuildForUbuntuJaunty HowToBuildForUbuntuJaunty 2010-07-16T09:04:12+09:00 (by munetoh)

@@ -359,19 +359,32 @@
 
 }}}
 
 ==== 2.4.5.2 Build and Install : !OpenPlatformTrustServices DEMO package ====
+
+TODO create deb package for jtreemap. until we need manual installation.
+
+{{{
+$ wget http://jaist.dl.sourceforge.net/sourceforge/jtreemap/jtreemap-1.1.0.zip
+$ unzip jtreemap-1.1.0.zip
+$ sudo cp jtreemap-site-1.1.0/jtreemap-1.1.0.jar /usr/share/java/jtreemap.jar
+}}}
+
+TODO 
+
+{{{
+sudo apt-get install tomcat5.5 tomcat5.5-webapps postgresql-8.3
+}}}
+
 
 {{{
 $ git clone git://git.sourceforge.jp/gitroot/openpts/demo.git
 $ cd demo
-$ make dpkg-buildpackage
+$ make dpkg-buildpackage 
 $ sudo dpkg -i ../openpts-tcdemo-client_0.1.3-git20090405_all.deb
 $ sudo dpkg -i ../openpts-tcdemo-client-gcj_0.1.3-git20090405_i386.deb
 $ sudo dpkg -i ../openpts-tcdemo-server_0.1.3-git20090405_all.deb
 }}}
-
-
 
 == 3. Demo setup ==
 
 === 3.1. Client side ===
]]> HowToBuildForUbuntuJaunty http://sourceforge.jp/projects/openpts/wiki/HowToBuildForUbuntuJaunty HowToBuildForUbuntuJaunty 2010-07-16T06:10:35+09:00 (by munetoh)

@@ -347,9 +347,9 @@
 ==== 2.4.5.2 Build and Install : !OpenPlatformTrustServices Core package ====
 
 {{{
 $ git clone git://git.sourceforge.jp/gitroot/openpts/core.git
-$ cd tools
+$ cd core
 $ make dpkg-buildpackage
 $ sudo dpkg -i ../openpts-core_0.1.3-git20090405_all.deb
 $ sudo dpkg -i ../openpts-core-gcj_0.1.3-git20090405_i386.deb
 }}}
@@ -362,9 +362,9 @@
 ==== 2.4.5.2 Build and Install : !OpenPlatformTrustServices DEMO package ====
 
 {{{
 $ git clone git://git.sourceforge.jp/gitroot/openpts/demo.git
-$ cd tools
+$ cd demo
 $ make dpkg-buildpackage
 $ sudo dpkg -i ../openpts-tcdemo-client_0.1.3-git20090405_all.deb
 $ sudo dpkg -i ../openpts-tcdemo-client-gcj_0.1.3-git20090405_i386.deb
 $ sudo dpkg -i ../openpts-tcdemo-server_0.1.3-git20090405_all.deb
]]> FrontPage http://sourceforge.jp/projects/openpts/wiki/FrontPage FrontPage 2010-02-21T08:06:31+09:00 (by munetoh)

@@ -96,9 +96,9 @@
 ||Fedora 8   || 2007/11/8  || (grub-ima) || 2.6.23 ||
 ||Fedora 9   || 2008/5/14  || grub-0.97-33 (grub-ima) || 2.6.25 - 2.6.27.25 (ibm_ima_8.5_2.6.27.6.patch)||
 ||Fedora 10  || 2008/11/25 || grub-0.97-38 (grub-0.97-38.fc10.ima-1.1.0.0.patch) || 2.6.27 - 2.6.27.41 (ibm_ima_8.5_2.6.27.6.patch)||
 ||Fedora 11  || 2009/6/9   || grub-0.97-50 (grub-ima) || 2.6.29 - 2.6.30.10 (ibm_ima_2.6.29.1.patch) ||
-||Fedora 12  || 2009/11/17 || grub-0.97-60 (grub-ima) || 2.6.31 - 2.6.31.12 (rebuild w/IMA)||
+||Fedora 12  || 2009/11/17 || grub-0.97-60 (grub-ima) || 2.6.31 - 2.6.31.12 (need fix for iTPM)||
 ||Ubuntu Hardy    ||2008/4/24 || (grub-ima) || 2.6.24 (ibm_ima_8.3_2.6.24.3.patch)||
 ||Ubuntu Intrepid ||2008/10/30|| (grub-0.97-29ubuntu45-ima-1.1.0.0.patch) || 2.6.27 (ibm_ima_8.5_2.6.27.6.patch)||
 ||Ubuntu Jaunty   ||2009/4/23 || (grub-0.97-29ubuntu45-ima-1.1.0.0.patch) || 2.6.28 ||
 ||Ubuntu Kermic   ||2009/10/29|| N/A (grub2)|| 2.6.31 - 2.6.31-14 ||
]]> FrontPage http://sourceforge.jp/projects/openpts/wiki/FrontPage FrontPage 2010-02-05T11:28:50+09:00 (by munetoh)

@@ -88,8 +88,22 @@
 LinuxDistroComparisonTable[[BR]]
 HackingLinuxTpmDeviceDriver[[BR]]
 
 === 5. Development ===
+
+||'''Distro'''||'''Release'''||'''bootloader (patch)'''||'''Kernel (patch)'''||
+||CentOS 5   ||            || (grub-ima) || 2.6.18 ||
+||Fedora 7   || 2007/5/31  || (grub-ima) || 2.6.21 ||
+||Fedora 8   || 2007/11/8  || (grub-ima) || 2.6.23 ||
+||Fedora 9   || 2008/5/14  || grub-0.97-33 (grub-ima) || 2.6.25 - 2.6.27.25 (ibm_ima_8.5_2.6.27.6.patch)||
+||Fedora 10  || 2008/11/25 || grub-0.97-38 (grub-0.97-38.fc10.ima-1.1.0.0.patch) || 2.6.27 - 2.6.27.41 (ibm_ima_8.5_2.6.27.6.patch)||
+||Fedora 11  || 2009/6/9   || grub-0.97-50 (grub-ima) || 2.6.29 - 2.6.30.10 (ibm_ima_2.6.29.1.patch) ||
+||Fedora 12  || 2009/11/17 || grub-0.97-60 (grub-ima) || 2.6.31 - 2.6.31.12 (rebuild w/IMA)||
+||Ubuntu Hardy    ||2008/4/24 || (grub-ima) || 2.6.24 (ibm_ima_8.3_2.6.24.3.patch)||
+||Ubuntu Intrepid ||2008/10/30|| (grub-0.97-29ubuntu45-ima-1.1.0.0.patch) || 2.6.27 (ibm_ima_8.5_2.6.27.6.patch)||
+||Ubuntu Jaunty   ||2009/4/23 || (grub-0.97-29ubuntu45-ima-1.1.0.0.patch) || 2.6.28 ||
+||Ubuntu Kermic   ||2009/10/29|| N/A (grub2)|| 2.6.31 - 2.6.31-14 ||
+||Ubuntu Lucid    ||2010/4/29 || N/A (grub2)|| ?      ||
 
 ==== 5.1. Fedora ====
 
  HowToBuildForRedHat[[BR]]
]]> HowToBuildForUbuntuJaunty http://sourceforge.jp/projects/openpts/wiki/HowToBuildForUbuntuJaunty HowToBuildForUbuntuJaunty 2009-09-21T10:53:02+09:00 (by munetoh)

@@ -428,14 +428,16 @@
 Set an admin password for postgres
 
 {{{
 sudo passwd postgres
+su - postgres
+psql -c "alter user postgres with password 'PASSWORD'" template1
 }}}
 
 Configure PostgreSQL for OpenPTS.
 {{{
 cd /usr/lib/openpts/database/
-sudo bash dbsetup.sh
+bash dbsetup.sh
 load /etc/openpts/db.conf
 S) Setup New Databases
 C) Show Current Configuration
 L) Show State
@@ -469,16 +471,19 @@
 
 it takes few hours.
 
 {{{
-# cd /var/lib/openpts
-# sh /usr/lib64/openpts/scripts/rpm-all.sh fedora
-Collect Package info of fedora
+cd /var/lib/openpts
+sudo sh /usr/lib/openpts/scripts/deb-all.sh ubuntu
+Collect Package info of ubuntu
   package list...
   treemap data...
   metadata...
   md5 digests...
+  sha1 digests...
+
 }}}
+
 
 Create map file, "/var/lib/openpts/database/ibatis/sqlMapsConfig.properties", e.g.
 
 {{{
@@ -548,11 +553,21 @@
 $ psql -e database_name < file_name.sql
 $ pg_restore –d database_name file_name.sql
 }}}
 
-===== 3.2.5. View IIDB,VULDB using phpPgAdmin (TBD) =====
+===== 3.2.5. View IIDB,VULDB using phpPgAdmin =====
+
+{{{
+sudo apt-get install phppgadmin
+/etc/init.d/apache2 start
+}}}
+
+http://localhost/phppgadmin/
+
+login as "ptsuser"
 
-http://localhost/phpPgAdmin/ 
+if login was failed, check the configuration file:
+/etc/postgresql/8.3/main/pg_hba.conf
 
 
 ==== 3.3 Setup Validation Server  (TBD) ====
 ===== 3.3.1. Setup TOMCAT (TBD) =====
]]> HowToBuildForUbuntuJaunty http://sourceforge.jp/projects/openpts/wiki/HowToBuildForUbuntuJaunty HowToBuildForUbuntuJaunty 2009-09-21T07:43:47+09:00 (by munetoh)

@@ -371,17 +371,265 @@
 }}}
 
 
 
+== 3. Demo setup ==
 
+=== 3.1. Client side ===
+==== 3.1.1 Take the TPM ownership (TBD) ====
 
+The SRK password must be a default setting. Just enter for SRK password.
 
-== 3. memo ==
+{{{
+$ tpm_takeownership
+Enter owner password: ********
+Confirm password: ********
+Enter SRK password:
+Confirm password:
+}}}
 
+If you get the following error message, The TPM has been taken the ownership.
 
+{{{
+Tspi_TPM_TakeOwnership failed: 0x00000008 - layer=tpm, code=0008 (8), The TPM target command has been disabled
+}}}
 
+And, If the size of "/var/lib/tpm/system.data" file is zero, your TSS forgot your ownership. To fix this, you take ownership again, or you can put the dummy system.data file to enable TSS as follows.
 
-==== 3.3 Test Trousers Build (Option) ====
+{{{
+sudo cp demo/sampledata/knoppix/dummy_system.data /var/lib/tpm/system.data
+sudo /etc/init.d/tcsd restart
+}}}
+
+
+==== 3.1.2. Setup Demo Env (TBD) ====
+
+{{{
+sudo /usr/bin/ptsclientadmin --commandline --user USERNAME
+}}}
+
+User's local configurations are stored at /home/$USERNAME/.pts 
+
+
+=== 3.2. Server side ===
+
+===== 3.2.1. Setup PostgreSQL (TBD) =====
+
+Install PostgreSQL
+
+{{{
+sudo apt-get install postgresql
+
+Setting up postgresql (8.3.7-1) ...
+
+sudo /etc/init.d/postgresql-8.3 status
+8.3     main      5432 online postgres /var/lib/postgresql/8.3/main       /var/log/postgresql/postgresql-8.3-main.log
+}}}
+
+Set an admin password for postgres
+
+{{{
+sudo passwd postgres
+}}}
+
+Configure PostgreSQL for OpenPTS.
+{{{
+cd /usr/lib/openpts/database/
+sudo bash dbsetup.sh
+load /etc/openpts/db.conf
+S) Setup New Databases
+C) Show Current Configuration
+L) Show State
+B) Backup Databases
+D) Delete Databases
+Q) Exit
+
+select:C
+
+Current Configurations
+DB type                               : postgres 
+DB admin                              : ptsadmin 
+DB user                               : ptsuser 
+Vulnerability Database name           : vuldb 
+Integrity Information Database 0 name : iidb_redhat 
+Integrity Information Database 1 name : iidb_centos 
+Integrity Information Database 2 name : iidb_knoppix 
+Integrity Information Database 3 name : iidb_ubuntu 
+Integrity Information Database 4 name : iidb_fedora 
+Integrity Information Database 5 name : iidb 
+Integrity Information Database 6 name : iidb 
+Integrity Information Database 7 name : iidb_bios 
+
+
+select:S
+
+}}}
+
+
+===== 3.2.2. Setup Integrity Information Database of current host =====
+
+it takes few hours.
+
+{{{
+# cd /var/lib/openpts
+# sh /usr/lib64/openpts/scripts/rpm-all.sh fedora
+Collect Package info of fedora
+  package list...
+  treemap data...
+  metadata...
+  md5 digests...
+}}}
+
+Create map file, "/var/lib/openpts/database/ibatis/sqlMapsConfig.properties", e.g.
+
+{{{
+driver=org.postgresql.Driver
+url_vul=jdbc:postgresql://localhost/vuldb
+url_iidb0=jdbc:postgresql://localhost/iidb_redhat
+url_iidb1=jdbc:postgresql://localhost/iidb_centos
+url_iidb2=jdbc:postgresql://localhost/iidb_knoppix
+url_iidb3=jdbc:postgresql://localhost/iidb_ubuntu
+url_iidb4=jdbc:postgresql://localhost/iidb_fedora
+url_iidb5=jdbc:postgresql://localhost/iidb
+url_iidb6=jdbc:postgresql://localhost/iidb
+url_iidb7=jdbc:postgresql://localhost/iidb
+username=ptsadmin
+password=password
+}}}
+
+Import RPM metadata/digest into IIDB. it takes time.
+
+{{{
+# /usr/bin/openpts rpmimport --dbindex 4 --inputdir  /var/lib/openpts/fedora/data/
+}}}
+
+Check the IIDB using openpts command. e.g.
+
+{{{
+# openpts iidb --list --index 4
+IIDB index:	4
+packages:	1622
+measuremnets:	250925
+ - vulnerable:
+	package    	0
+	measurement	0
+ - safe:
+	package    	0
+	measurement	0
+ - unclear:
+	package    	0
+	measurement	0
+ - unchecked:
+	package    	1622
+	measurement	250925
+
+# sha1sum /usr/sbin/acpid
+b5e042dfeac3bb70a686be5abd1fcb6a9472c6de  /usr/sbin/acpid
+
+# openpts iidb --search --index 4 --digest b5e042dfeac3bb70a686be5abd1fcb6a9472c6de
+hexDigest     : b5e042dfeac3bb70a686be5abd1fcb6a9472c6de
+id            : 47331
+filename      : /usr/sbin/acpid
+obsolete      : 0
+vulnerability : 0
+packageName : acpid-1.0.6-11.fc10.x86_64
+}}}
+
+===== 3.2.3. Setup Vulnerability Database (TBD) =====
+
+Just fill CVE info into Vulnerability Database. The database can not link with integrity database. Since there is no good source of Security Advisory for Fedora, OVAL only support RHEL.
+
+/usr/bin/openpts cve --xmlfile http://nvd.nist.gov/download/nvdcve-2009.xml --outputdir /tmp
+
+===== 3.2.4.. Backup and restore database (TBD) =====
+
+{{{
+$ pg_dump database_name > file_name.sql
+
+$ psql -e database_name < file_name.sql
+$ pg_restore –d database_name file_name.sql
+}}}
+
+===== 3.2.5. View IIDB,VULDB using phpPgAdmin (TBD) =====
+
+http://localhost/phpPgAdmin/ 
+
+
+==== 3.3 Setup Validation Server  (TBD) ====
+===== 3.3.1. Setup TOMCAT (TBD) =====
+
+# yum install tomcat5 tomcat5-webapps tomcat5-admin-webapps 
+
+/etc/sysconfig/tomcat5
+
+JAVA_HOME="/usr/java/jdk1.6.0_12/"
+
+# rpm -ivh /home/foo/rpmbuild/RPMS/x86_64/openpts-tcdemo-server-0.1.3-git20090613.fc10.x86_64.rpm'
+
+# /sbin/service tomcat5 start 
+# chkconfig tomcat5 on
+
+http://localhost:8080/pva/
+
+Log file /var/log/tomcat5/catalina.out
+6-3-X. Setup Demo Contents¶
+
+Create account, user "guest" and password "given".
+
+# htpasswd -c /var/www/.htpasswd guest
+
+Create demo contents
+
+# mkdir -p /var/www/html/tcdemo
+
+Edit /var/www/html/tcdemo/index.html
+
+
+
+ OpenPTS Test 
+





+
+
 OpenPTS Test 

+
+
+
+Edit /etc/httpd/conf/httpd.conf
+
+...
+
+...
+AuthType Basic
+AuthName "Password Required"
+AuthUserFile /var/www/.htpasswd
+AuthGroupFile /dev/null
+require valid-user
+
+
+...
+
+# service httpd start
+# chkconfig httpd on
+
+http://localhost/tcdemo
+
+===== Run TC Demo (TBD) =====
+
+(OPTION) To monitor server-side validation log, open terminal
+
+tailf /var/log/openpts.log
+
+/usr/bin/ptsclientuser --commandline 
+
+if validation was success, it open http://localhost/tcdemo.
+
+Congratulation! 
+
+=== 3.3. Test ===
+
+
+== X. memo ==
+
+==== X.X Test Trousers Build (Option) ====
 
 Ubuntu package does not support GTK.
 to enable GTK feature (popup password), re-build the trousers with GTK option.
]]>