vtpmmgr: Flush transient keys on shutdown

Remove our key so it isn't left in the TPM for someone to come along
after vtpmmgr shutsdown.

Signed-off-by: Jason Andryuk <jandryuk@gmail.com>
Reviewed-by: Samuel Thibault <samuel.thibault@ens-lyon.org>
Reviewed-by: Daniel P. Smith <dpsmith@apertussolutions.com>
This commit is contained in:
Jason Andryuk authored and Andrew Cooper committed 2021-05-10 14:49:00 +01:00
1 parent 3f1b5080d6
commit ec9596dc53
1 file changed
+8
+8
View File
@@ -792,6 +792,14 @@ void vtpmmgr_shutdown(void)
/* Close tpmback */
shutdown_tpmback();
if (hw_is_tpm2()) {
/* Blow away all stale handles left in the tpm*/
if (flush_tpm2() != TPM_SUCCESS) {
vtpmlogerror(VTPM_LOG_TPM,
"TPM2_FlushResources failed, continuing shutdown..\n");
}
}
/* Close tpmfront/tpm_tis */
close(vtpm_globals.tpm_fd);
Reference in new issue
Block a user
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.