components/library/trousers/patches/dist_tcsd.conf.in.patch

   1 --- trousers-0.3.11.2/dist/tcsd.conf.in.orig
   2 +++ trousers-0.3.11.2/dist/tcsd.conf.in
   3 @@ -9,10 +9,16 @@
   4  #
   5
   6  # Option: port
   7 -# Values: 1 - 65535
   8 +# Values: 0 - 65535
   9  # Description: The port that the tcsd will listen on.
  10 +# If 0, use UNIX Domain socket /var/tpm/tcsd-socket,
  11 +# otherwise use the specified TCP port (30003 is the traditional tcsd TCP port).
  12  #
  13 -# port = 30003
  14 +# If using a TCP Port (that is, port is not 0), clients such as tpmadm must set
  15 +# the port with shell environment variable TSS_TCSD_PORT. For example,
  16 +#      export TSS_TCSD_PORT=30003
  17 +#
  18 +# port = 0
  19  #
  20
  21  # Option: num_threads
  22 @@ -37,6 +43,7 @@
  23  #
  24  # firmware_log_file = /sys/kernel/security/tpm0/binary_bios_measurements
  25  #
  26 +firmware_log_file=/var/tpm/system/pcrevent.log
  27
  28  # Option: kernel_log_file
  29  # Values: Any absolute directory path
  30 @@ -54,7 +61,7 @@
  31  # Description: A list of PCR indices that are manipulated only by the system
  32  #  firmware and therefore are not extended or logged by the TCSD.
  33  #
  34 -# firmware_pcrs =
  35 +firmware_pcrs =0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,20,21
  36  #
  37
  38  # Option: kernel_pcrs