📄 readme
字号:
*** AMD Confidential ***Travis Security Server(secserv) and serial number library.Currently the secserv will read serial number from a file and/or symlink along with a digital signature. The secserv validates the signature and starts listening on a UDP port for serialnumber request. Files:secserv - This program should be started in one of the startup RC files. It must be started before any calls to getSerialNum function call, but after all the file system mounts.setserial - Is a program used by the OEM to set the serial number of the device. This program must not be shipped with the device. For internal development, developerscan execute the command "setserial <some fake serial numbers>"libserialpriv.a - This is an AMD development library which has the getSerialNum function.This library should only be installed into the AMD development file system and MUST NOT BEINSTALL ON the device or released to OEM. There is intentional no shared library and the functions names are obfuscated in the static library.serial.h - This is the include file for libserialpriv.a. As with libserialpriv.a this is forAMD development only and must not be installed or released to OEM.OEM Functions:This file contains an working example API.There is three OEM fucntion which OEMs can customize to meet the requirements andneeds of their enviroment.1. oemSecurityAlertCB - This is a callback which will be invoked when an error occursand in some cases to report success.2. oemGetSerialNum - This function is called by secserv to retrieve ther PMP serial number.The provided code implements the signed serial number files and symlinks. This functioncan be replaced with OEM supplied fuction.3. oemSerialCheck any checks to insure the integrity of the system. The suppliedroute rewrites the signed serial number files and symlinks.Suggestions: If you have an firmware solution for serial number, then have thesecserv sign the files. Then compare to make sure there is no tampering has taken place.BUILDINGmake clean;makelibserialpriv.a should be installed in /usr/libsecserv should be installed in /etcsetserial should be installed in /usr/local/etcserial.h should installed in an include directory. Not sure the best place.TODOFix keygen to create a unique set of keys for each OEM and store them into an build timeinclude file.
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -