Age | Commit message (Collapse) | Author | Files | Lines |
|
Change-Id: Ic6865eb0a587c50af8b81e929eb007f57c2bd1d0
Signed-off-by: Kyungwook Tak <k.tak@samsung.com>
|
|
There's two part of directory traversing(removing all files in directory
and loading preloaded app deks). So duplicated code can be compressed to
traverse_directory with entry callback registered.
Change-Id: I654bed7f3b4efff75b2853fceb3f9d97b51a85b5
Signed-off-by: Kyungwook Tak <k.tak@samsung.com>
|
|
Reload option is not needed anymore.
To be secure, remove all KEKs from dek store (also adek) after loading
preloaded adeks once. Loaded adeks are stored in key-manager so they're
useless.
Related test cases are added. (load preloaded app deks)
(TODO) To use key-manager initial value feature is highly considered
to store KEK private key more securely.
Change-Id: I2f6c645398277968cd7d480236d1802a07fa33df
Signed-off-by: Kyungwook Tak <k.tak@samsung.com>
|
|
There is a bug in if statement, it don't allow to properly work
of this initializer if there are no --reload flag.
Other way to do it is simply use wae_initializer always as it
is with --reload flag.
Change-Id: I9622373c914f8c0f1f22d3f810417251cced81ba
Signed-off-by: Bartlomiej Kunikowski <b.kunikowski@partner.samsung.com>
(cherry picked from commit 1fcac8945420537f89d24a0e8e52ec99cc432674)
|
|
There is a bug in if statement, it don't allow to properly work
of this initializer if there are no --reload flag.
Other way to do it is simply use wae_initializer always as it
is with --reload flag.
Change-Id: I9622373c914f8c0f1f22d3f810417251cced81ba
Signed-off-by: Bartlomiej Kunikowski <b.kunikowski@partner.samsung.com>
|
|
Change-Id: Iceabc2db52f6cd004d9a4880eaf91425c425cb71
Signed-off-by: Kyungwook Tak <k.tak@samsung.com>
|
|
RO partition shouldn't be modified
Change-Id: I70b8de4051cd4295b5431b77fd5eb82f1e518731
Signed-off-by: Kyungwook Tak <k.tak@samsung.com>
|
|
wae-upgrade.sh -> 200.wae.sh
Change-Id: I77f59c43be20cdb7eb808ca5e7a754287bcdfcb0
Signed-off-by: Kyungwook Tak <k.tak@samsung.com>
|
|
Change-Id: I07c54554e9f79f75dcb58435e8b39bfd24f1599d
Signed-off-by: Kyungwook Tak <k.tak@samsung.com>
|
|
1) Missing returned value checking.
2) variable misused (start -> end).
3) Dead code exist in preloaded app dek loading while loop.
Make subroutine to simplify loop codes/resource managed.
Change-Id: Ic775e336e6480dfb56539e382edf292f2101ec8b
Signed-off-by: Kyungwook Tak <k.tak@samsung.com>
|
|
Change-Id: I4d38443cf3880b50215aa36e084445cc8bbb60be
Signed-off-by: Kyungwook Tak <k.tak@samsung.com>
|
|
[Problem]
* EVP_Digest parameter type is unsigned int
* size_t is differ between 32bit and 64bit
[Solution]
* Use unsigned int instead of size_t
Change-Id: Ib398532c7148bcd9d736c7282e0b74c8042a2ede
Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
|
|
Installer will be run as system (from user) so we cannot retrieve user
id from client credential(by key-manager).
Change-Id: I1e091bfc0b88fce418cd209a7a1adab021b6c0d2
Signed-off-by: Kyungwook Tak <k.tak@samsung.com>
|
|
Change-Id: I15ee0cb42c05cf19d875b4b9acf96e78939a240f
Signed-off-by: Kyungwook Tak <k.tak@samsung.com>
|
|
For migrated web app, we need to more fields in cache e.g., IV and
is_migrated flag to handle it separately.
Because cipher algorithm, iv and key size could be different between old
secure storage, it depends on product implementation. So this
architecture needs more flexibility.
A lot of code changed because of the principle data structure is added
from the bottom.
Change-Id: Id6a10b9f707f4da25016dd928ab4049be619a610
Signed-off-by: Kyungwook Tak <k.tak@samsung.com>
|
|
Change-Id: I685a98780fde45ad0975a0a80dcabd68760f9244
Signed-off-by: Yunjin Lee <yunjin-.lee@samsung.com>
|
|
Change-Id: I300a887e7e633af858e102797c500d1266566355
Signed-off-by: Kyungwook Tak <k.tak@samsung.com>
|
|
Change-Id: I60d574d8813637077fa1e278a3d72dbfed07333c
Signed-off-by: Kyungwook Tak <k.tak@samsung.com>
|
|
secure-storage is removed since Tizen platform version 3.0.
downloaded web apps encryption works based on different key from lower
than 3.0. secure-storage used DUK(device unique key with seed(pkgid)) as DEK.
If downloaded app cannot find DEK when decrypt, it's considered as
encrypted lower than 3.0 case. So webappenc creates DEK and uses algorithm
which had been used lower than 3.0 in secure-storage.
For now it's hard to save newly created old key in key-manager because
migrated web app is considered as global app and the case would be found
in decryption time (by web app launcher) who don't have permission to save
in system db of key-manager with "/System" label.
Permission policy of system db of key-manager should be changed OR
migrated app should not be global app (it should be downloaded normal
app) to save created key in key-manager.
Change-Id: I9b8516184cce9f43b328e290c15127151e5c861e
Signed-off-by: Kyungwook Tak <k.tak@samsung.com>
|
|
- Remove some goto label which isn't needed
- Change 'num' param of strncmp / strncpy with meaningful value
(static buffer's size)
- Add const to unsigned char array input param
- Change param names (c string array and raw buffer array)
const char *pPkgId -> pkgId
unsigned char *pDek -> dek
unsigned char **ppDek -> pDek
- Change all camel naminges to underbar
- Remove null checking before call free()
free() does nothing if ptr is null pointer.
(refer: http://linux.die.net/man/3/free)
- Add missing closedir() after opendir()
Change-Id: I7e5888ed3dc77e5355cfc441f10dc0d6d916921c
Signed-off-by: Kyungwook Tak <k.tak@samsung.com>
|
|
run with sdb root on : wae_tests --run_test=SYSTEM
run with sdb root off : wae_tests --run_test=USER
Change-Id: I0792e1e649f5e36c6f8715047f5ba5fd9ec48ecf
Signed-off-by: Kyungwook Tak <k.tak@samsung.com>
|
|
Change-Id: Ib54e8558417b8f32782c7ada3d6bdda8999a5b0f
Signed-off-by: Kyungwook Tak <k.tak@samsung.com>
|
|
Change-Id: I495bcdeae8705c2bb8b605762e31458919736926
Signed-off-by: Kyungwook Tak <k.tak@samsung.com>
|
|
Change-Id: I6d95a582cd8d2ec52adb314a167bd42dd386ac0b
Signed-off-by: Kyungwook Tak <k.tak@samsung.com>
|
|
This reverts commit d1da2aa31e64a93d1e1f5b3c7586c6a4186df4f3.
The smack labels of xxx-backend was changed into User label again.
Change-Id: Ic50ef8739d9e39914d518d1e063eec9a62a7831d
|
|
Change-Id: I1522806cb2b7511455821134f8ae42a53a575e6e
Signed-off-by: Dongsun Lee <ds73.lee@samsung.com>
|
|
Remove unused values in test code
Handle negative return value from ftell
Change-Id: I331e1335ad900ef9e5ec4523a832ec2c38dfb7f8
Signed-off-by: Kyungwook Tak <k.tak@samsung.com>
|
|
Change-Id: I664d9f039b09b576c4ebe84c29d8a7c459bc1384
Signed-off-by: Kyungwook Tak <k.tak@samsung.com>
|
|
- Fix groups
- Remove non-used definition
- Use macros
Change-Id: I109ebe1280138c23bbd12f7f97e7665110cdd646
Signed-off-by: Kyungwook Tak <k.tak@samsung.com>
|
|
Change-Id: I79f9c4e40c72bcbe29fd1bb662566a7c614cb2ca
Signed-off-by: Kyungwook Tak <k.tak@samsung.com>
|
|
Change-Id: I37a0eb70b2a89f5deb86d312473d31533bb8a4a2
Signed-off-by: Kyungwook Tak <k.tak@samsung.com>
|
|
Change-Id: I80623a8502d4a443718e5ecf449818fc75e731c1
Signed-off-by: Dongsun Lee <ds73.lee@samsung.com>
|
|
Change-Id: Icee00ba20a651600bb64ed045910fddba9bf915b
Signed-off-by: Dongsun Lee <ds73.lee@samsung.com>
|
|
Change-Id: Ic9a60b295bff13bb59c1c6990dfbad569e92c267
Signed-off-by: Dongsun Lee <ds73.lee@samsung.com>
|
|
Change-Id: If64499d0636ea6a08d9a96f73f83fa7d57d858e4
Signed-off-by: Dongsun Lee <ds73.lee@samsung.com>
|
|
Change-Id: Ibb7891bee67bdd82f34187f5da2fc3c4bbfa8fcd
Signed-off-by: Dongsun Lee <ds73.lee@samsung.com>
|
|
|