Re: [Trustedjava-support] Non-root access to TPM Emulator

[Thomas W. <tc...@to...>]

Hi,

> Is there a way make non-root processes access TPM Emulator?  I am running
> into troubles regarding access permission to /dev/tpm or socket file in
> /var/tpm, from non-root processes.

Most modern Linux distributions are using udev to manage the nodes in /dev.
Therefore a good place to start is to have a look at the /etc/udev directory. 
There you (might) find a rules.d folder where you can place rules for the 
udev daemon. That's what the readme says about it:

"The files in this directory are read by udev(7) and used when events
are performed by the kernel.  The udev daemon watches this directory
with inotify so that changes to these files are automatically picked
up."

So - you could place a rule in this folder to set the group and mode udev 
assigns to the /dev/tpm device when the module is loaded.
Note that this information applies to Ubuntu distros - it might be slightly 
different when using some other distribution. On Ubuntu you could simply add 
a rule to the following rules file: /etc/udev/rules.d/40-permissions.rules

hth,
-- 
Thomas Winkler
tc...@to...