Jason Andryuk, le mar. 04 mai 2021 08:48:39 -0400, a ecrit:
> Remove our key so it isn't left in the TPM for someone to come along
> after vtpmmgr shutsdown.
>
> Signed-off-by: Jason Andryuk <jandr...@gmail.com>
Reviewed-by: Samuel Thibault <samuel.thiba...@ens-lyon.org>
> ---
> stubdom/vtpmmgr/init.c | 8 ++++++++
> 1 file changed, 8 insertions(+)
>
> diff --git a/stubdom/vtpmmgr/init.c b/stubdom/vtpmmgr/init.c
> index 569b0dd1dc..d9fefa9be6 100644
> --- a/stubdom/vtpmmgr/init.c
> +++ b/stubdom/vtpmmgr/init.c
> @@ -792,6 +792,14 @@ void vtpmmgr_shutdown(void)
> /* Close tpmback */
> shutdown_tpmback();
>
> + if (hw_is_tpm2()) {
> + /* Blow away all stale handles left in the tpm*/
> + if (flush_tpm2() != TPM_SUCCESS) {
> + vtpmlogerror(VTPM_LOG_TPM,
> + "TPM2_FlushResources failed, continuing
> shutdown..\n");
> + }
> + }
> +
> /* Close tpmfront/tpm_tis */
> close(vtpm_globals.tpm_fd);
>
> --
> 2.30.2
>
