| 8c63536ded48bf803db9d98d46837bd7fcad9dc0 |
|
08-Sep-2016 |
Alexey Polyudov <apolyudov@google.com> |
gatekeeperd: protect from invalid data passed by HAL
Bug: 31349112
Change-Id: I6c0656f85e44054147f8795c98baab7a98f575b9
Signed-off-by: Alexey Polyudov <apolyudov@google.com>
/system/core/gatekeeperd/gatekeeperd.cpp
|
| 1cf7d259e856f589657c597d46f6f53d1dbf3fae |
|
05-Aug-2015 |
Andres Morales <anmorales@google.com> |
[gatekeeperd] Check parent profile for SID lookups
Bug: 22257554
Change-Id: I1a363729b449a2bc8594b48dada719fd79da7036
/system/core/gatekeeperd/gatekeeperd.cpp
|
| 787c3764d305168e927c29d5d57ae68e242cd7a9 |
|
10-Jul-2015 |
Andres Morales <anmorales@google.com> |
Merge "[gatekeeperd] fix use of uninitialized memory" into mnc-dev
|
| 0b0435ea87f87b31652a2c6272c1f77438bfcdf1 |
|
10-Jul-2015 |
Andres Morales <anmorales@google.com> |
[gatekeeperd] fix file descriptor leak
Bug: 22403703
Change-Id: I65da3b3b3f85db035d79277344beb5460cb025f2
/system/core/gatekeeperd/gatekeeperd.cpp
|
| fef908e5a50a4026bb94edabb8f500a959b9ed0e |
|
07-Jul-2015 |
Andres Morales <anmorales@google.com> |
[gatekeeperd] fix use of uninitialized memory
Bug: 22319772
Change-Id: I3cb83389f11e54867aca132de48a3f6407b7eaf3
/system/core/gatekeeperd/gatekeeperd.cpp
|
| 7f6dcf657680aaf51dcd5d41c32c89254779b2a8 |
|
25-Jun-2015 |
Andres Morales <anmorales@google.com> |
[gatekeeperd] fix issue with SW->HW upgrades
If the handle version is 0, there's no hardware_backed flag
meaning hardware backed handles will be attempted against
the soft impl. Ensure we don't try to read from hardware_backed
unless the version is > 0.
Bug: 21090356
Change-Id: I65f009c55538ea3c20eb486b580eb11ce93934fc
/system/core/gatekeeperd/gatekeeperd.cpp
|
| 3c2086dabdb87e027412bb4405279128a321e184 |
|
24-Jun-2015 |
Andres Morales <anmorales@google.com> |
[gatekeeperd] clear state and mark on cold boot
required to initialize state by certain HAL impls
Bug: 22011857
Change-Id: Ibb01a799da983e1a930aae946c331b23f571861d
/system/core/gatekeeperd/gatekeeperd.cpp
|
| 835d96eae59aefeaa32fda3218246db51bf22fab |
|
04-Jun-2015 |
Andres Morales <anmorales@google.com> |
[gatekeeperd] handle upgrades from software version to HAL
Certain devices, like Shamu, are currently running an interim
software-only gatekeeper. When the HAL for those devices is merged,
we need to handle upgrading to the HAL smoothly.
Bug: 21090356
Change-Id: I5352bc547a43671a08249eae532e8b3ce6b90087
/system/core/gatekeeperd/gatekeeperd.cpp
|
| 531e3e83c28a2fdb2270b26b2bf0333ed6e30682 |
|
02-Jun-2015 |
Andres Morales <anmorales@google.com> |
[gatekeeperd] verify a password after enrolling successfully
Bug: 20918106
Change-Id: Ia3cb6d1375d9ee2a6e543ee97d37b7c4f0459447
/system/core/gatekeeperd/gatekeeperd.cpp
|
| ae242929da80d88a7db223984ec9baa5fd5949e6 |
|
18-May-2015 |
Andres Morales <anmorales@google.com> |
[gatekeeperd] return brute-force throttling information
Bug: 21118563
Change-Id: I13c6a44f61668be8b4c1fde8c84dcfebab84517c
/system/core/gatekeeperd/gatekeeperd.cpp
|
| 33dfdc7bbc48911a8a5324b16b05e492ae653d76 |
|
13-May-2015 |
Andres Morales <anmorales@google.com> |
Move SoftGateKeeper into gatekeeperd
Allows for easy determination of whether there's a
hardware module in place. Permits tighter coupling of
software implementation with upper-level stack.
Bug:21090356
Change-Id: I275b57cd976c233c43c476c5869c5a4b29fbc175
/system/core/gatekeeperd/gatekeeperd.cpp
|
| dcb3fbdaa4bf5eca7b6a07689871e4e8f631070c |
|
17-Apr-2015 |
Andres Morales <anmorales@google.com> |
Make clear SID delete the file
This allows us to recover in situations where we manage
to clear the SID in GateKeeper but fail to remove the
password in LockSettingsService.
Change-Id: Ib64ead137632f9615745a414c90a9b66b847134f
/system/core/gatekeeperd/gatekeeperd.cpp
|
| 7c9c3bc9c2d3f98ff839f73dc76750dc23693eae |
|
17-Apr-2015 |
Andres Morales <anmorales@google.com> |
Implement clear SID API
Change-Id: I4ada55674edff32d3e39d460070e03abbf847359
/system/core/gatekeeperd/gatekeeperd.cpp
|
| 6a49c2fa4371cad600f4a96da3d1644df862d2a5 |
|
16-Apr-2015 |
Andres Morales <anmorales@google.com> |
Implement SID API
Change-Id: Id11632a6b4b9cab6f08f97026dd65fdf49a46491
/system/core/gatekeeperd/gatekeeperd.cpp
|
| 2ae8b4c28fc95022b2075e77c73959e51e01b6ce |
|
13-Apr-2015 |
Andres Morales <anmorales@google.com> |
Use proper NO_ERROR checking KS return value
It's a bit weird that KS defines NO_ERROR outside a
namespace like the Android binder lib, but assigns
it the value 1 instead of 0.
Change-Id: I5aedfd495f2f3bdff7eb1b4ba0f75d335dfe12d9
/system/core/gatekeeperd/gatekeeperd.cpp
|
| c828ae87768f3539cefadb7e485b877995918299 |
|
11-Apr-2015 |
Andres Morales <anmorales@google.com> |
Update verify API to return auth token blob
Change-Id: I853e61815458b54fb3b2f29e12a147b3b9aa3788
/system/core/gatekeeperd/gatekeeperd.cpp
|
| 851b57c1f81bd3572cf5908611ba029be934c706 |
|
10-Apr-2015 |
Andres Morales <anmorales@google.com> |
Add challenge to verify call
required for enrolling secondary auth form factors
Change-Id: Ia3e1d47f988bca1bb1a0e713c000886e60b4e839
/system/core/gatekeeperd/gatekeeperd.cpp
|
| 2d08dce0beedcfc63b2a837045d1be7d49157555 |
|
04-Apr-2015 |
Andres Morales <anmorales@google.com> |
GateKeeper proxy service
Until we have SELinux support for gating access
to individual TEE services, we will proxy TEE requests
to GateKeeper via this daemon.
Change-Id: Ifa316b75f75bff79bdae613a112c8c3c2e7189a8
/system/core/gatekeeperd/gatekeeperd.cpp
|