shaba/systemd
1
0
Fork 0
mirror of https://github.com/systemd/systemd.git synced 2025-01-26 14:04:03 +03:00
Code

tpm2-util: if we run in a container, ignore /sys/class/tpmrm/* contents

Browse Source
This commit is contained in:
Lennart Poettering 2022-04-21 11:24:37 +02:00
parent 2338b8f9c5
commit 44d5dd655e
1 changed files with 13 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
src/shared/tpm2-util.c
View File

@ -5,6 +5,7 @@
#include "parse-util.h"
#include "stat-util.h"
#include "tpm2-util.h"
#include "virt.h"
#if HAVE_TPM2
#include "alloc-util.h"
@ -1460,12 +1461,18 @@ Tpm2Support tpm2_support(void) {
Tpm2Support support = TPM2_SUPPORT_NONE;
int r;
r = dir_is_empty("/sys/class/tpmrm");
if (r < 0) {
if (r != -ENOENT)
log_debug_errno(r, "Unable to test whether /sys/class/tpmrm/ exists and is populated, assuming it is not: %m");
} else if (r == 0) /* populated! */
support |= TPM2_SUPPORT_DRIVER;
if (detect_container() <= 0) {
/* Check if there's a /dev/tpmrm* device via sysfs. If we run in a container we likely just
* got the host sysfs mounted. Since devices are generally not virtualized for containers,
* let's assume containers never have a TPM, at least for now. */
r = dir_is_empty("/sys/class/tpmrm");
if (r < 0) {
if (r != -ENOENT)
log_debug_errno(r, "Unable to test whether /sys/class/tpmrm/ exists and is populated, assuming it is not: %m");
} else if (r == 0) /* populated! */
support |= TPM2_SUPPORT_DRIVER;
}
if (efi_has_tpm2())
support |= TPM2_SUPPORT_FIRMWARE;