HIRS/tools/tcg_eventlog_tool
iadgovuser26 b8af8fb23a
Merge pull request #270 from nsacyber/issue-261
Change package name to tcg_eventlog_tool
2020-06-18 10:56:53 -04:00
..
config/checkstyle added a eventcheck script to check and event log against a signed RIM 2020-05-27 17:31:15 -04:00
gradle/wrapper added a eventcheck script to check and event log against a signed RIM 2020-05-27 17:31:15 -04:00
scripts modified build.gradle to build RPMs. 2020-05-29 17:20:06 -04:00
src/main/java/hirs/tcg_eventlog set package name to tcg_eventlog_tool 2020-06-18 09:51:03 -04:00
build.gradle set package name to tcg_eventlog_tool 2020-06-18 09:51:03 -04:00
gradlew added a eventcheck script to check and event log against a signed RIM 2020-05-27 17:31:15 -04:00
README.md Update README.md 2020-06-15 14:07:16 -04:00
VERSION added a eventcheck script to check and event log against a signed RIM 2020-05-27 17:31:15 -04:00

To support the PC Client RIM Specification which utilizes the TPM Event Log as a Support RIM type , it was useful to have a tool for inspecting the contents of the TPM event log. A Linux command line tool named "elt" (event log tool) has been created to parse and print human readable output, provide hedicimal evnts which can be used as test patterns, and to compare event logs for providing details on what events miscompared.

Building

To build this tool navigate to the tcg_eventlog-tool directory and use the following commmand:

./gradlew clean build

To create an RPM on a linux device use the following command in the dame directory:

./gradlew builRPM

To install this tool use the following commmand from the same directory:

sudo yum localinstall build/distrobutions/tgc_rim_tool.*.rpm

Usage

The tcg_eventlog_tool can be invoked using the elt command has various command line options to view all, specific events, or specific PCRs. Current options for the tool can be found using the -h option:

elt -h

With No FILE the default event log path (e.g. /sys/kernel/security/tpm0/binary_bios_measurements o Linux) is used. Note admin privileges are required for accessing the default path in Linux. All OPTIONS must be separated by a space delimiter, no concatenation of OPTIONS is currently supported.

An example output for the tcg_eventlog_tool filtering on event 1 would be:

elt -f ~/TpmLog.bin -e 1