trustedgrub-users

Re: [Trustedgrub-users] Unable to build trusted-grub

[Marcel S. <tg...@se...>]

Hi Luke,

> I can't seem to build trusted-grub on an ubuntu system, using gcc-3.4
> builtins.c:5566: error: invalid storage class for function �process_var�
> builtins.c:5566: warning: no previous prototype for �process_var�
> builtins.c:5626: error: invalid storage class for function �process_block�
> builtins.c:5626: warning: no previous prototype for �process_block�

these error messages look exactly like mine, when I compile TrustedGRUB with gcc-4.
Can you check again, whether you really are using gcc-3.4.?

> The build script seems to be broken in a number of places, so I'm just
> stepping through, and running the build commands individually.

Can you describe what is broken on the build-script? Did you try to run it with the
option "-v" for more verbosity?

Best regards,
Marcel Selhorst

Re: [Trustedgrub-users] Unable to build trusted-grub

[Luke <sec...@gm...>]

Marcel Selhorst wrote:
> > Hi Luke,
> >
>> >> I can't seem to build trusted-grub on an ubuntu system, using gcc-3.4
>> >> builtins.c:5566: error: invalid storage class for function
�process_var�
>> >> builtins.c:5566: warning: no previous prototype for �process_var�
>> >> builtins.c:5626: error: invalid storage class for function
�process_block�
>> >> builtins.c:5626: warning: no previous prototype for �process_block�
> >
> > these error messages look exactly like mine, when I compile
TrustedGRUB with gcc-4.
> > Can you check again, whether you really are using gcc-3.4.?
> >
>> >> The build script seems to be broken in a number of places, so I'm just
>> >> stepping through, and running the build commands individually.
> >
> > Can you describe what is broken on the build-script? Did you try to
run it with the
> > option "-v" for more verbosity?
> >
> >

Enabling verbose output
./build_tgrub.sh: 157: [[: not found
[: 158: ==: unexpected operator
Wrong gcc-version, please use GCC 3.x
exit: 158: Illegal number: -1

gcc --version:
gcc (GCC) 3.4.6 (Ubuntu 3.4.6-3ubuntu1)
Copyright (C) 2006 Free Software Foundation, Inc.
This is free software; see the source for copying conditions.  There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

It looks like there's a problem with the brackets somewhere... I'll
debug it later if I get the time.

I was able to compile, however.

Re: [Trustedgrub-users] Unable to build trusted-grub

[Marcel S. <tg...@se...>]

Hi Luke,

> Enabling verbose output
> ./build_tgrub.sh: 157: [[: not found
> [: 158: ==: unexpected operator
> Wrong gcc-version, please use GCC 3.x
> exit: 158: Illegal number: -1

Ah, I see, which version of BASH do you use? I have:

GNU bash, version 3.2.9(1)-release (i686-pc-linux-gnu)
Copyright (C) 2005 Free Software Foundation, Inc.

Probably, there are some changes... :)

> It looks like there's a problem with the brackets somewhere... I'll
> debug it later if I get the time.

thanks!

> I was able to compile, however.

OK, fine, does it work for you?

Re: [Trustedgrub-users] Unable to build trusted-grub

[Luke <sec...@gm...>]

Marcel Selhorst wrote:
> OK, fine, does it work for you?

Not really - I get a "TPM not found" message at the top of the screen
with the grub> prompt.

My TPM is active, and uses the tpm_tis driver (with the force=1 option
for ACPI) included in the linux 2.6.19 kernel.  It's a Dell 380.

Any ideas on how to fix this?

Re: [Trustedgrub-users] Unable to build trusted-grub

[Marcel S. <tg...@se...>]

Hi,

> My TPM is active, and uses the tpm_tis driver (with the force=1 option
> for ACPI) included in the linux 2.6.19 kernel.  It's a Dell 380.

Good to see, that your TPM is working under Linux. But as you can see, Dell didn't
add the TPM into their ACPI-table, which is why you have to use the force=1 option.

Additionally, Dell does not provide the necessary CRTM-functionality in their BIOS.
Therefore, TrustedGRUB is not able to make use of the TPM and works as a regular
GRUB. The only functionality you can then use is the "checkfile"-option to verify
files prior booting. But the measurements will not be extended into any PCR.

> Any ideas on how to fix this?

You can't, Dell has to provide a BIOS with CRTM-functionality.

Sorry, for the bad news and best regards,
Marcel