users

users@lists.genode.org

6 participants
2306 discussions

residual data in dataspaces
by Boris Mulder 12 Feb '18

12 Feb '18

Hello, We often use cryptographic data such as keys in our code. Some of these data are provided by a component that reads them from a file or from user input. Other components use these keys to encrypt or decrypt data such as network traffic, or maybe other keys. For example, a component asks a user for a password, then the password is used to derive a key, the component puts it in a dataspace accessible as a ROM module by a network encryption component, which is then used to encrypt network packets. It is a good idea to leave traces of residual data in as little places as possible, to reduce the number of sensitive memory locations to a minimum in order to reduce attack vectors. So it would be nice if in the example, the network component could ask the password component to clear the key from the dataspace once it is done with this key. Currently, the ROM session has no way of doing this; besides, there might be complications such as other clients accessing the dataspace. It would be nice to have this functionality somehow, so we have thought of some possibilities: * introducing a new session which wraps a rom/ram-dataspace and clears it after reading, or if the client(s) have issued a clear request at the server, after which the data is overwritten by zeroes or random; * extending the ROM-session in such a way How do you feel about this topic? -- Met vriendelijke groet / kind regards, Boris Mulder Cyber Security Labs B.V. | Gooimeer 6-31 | 1411 DD Naarden | The Netherlands +31 35 631 3253 (office)

1 0

Microkernel and alumni meetup
by Matthias Lange 11 Feb '18

11 Feb '18

Dear friends of the microkernel, it's about time for another microkernel and alumni meetup to catch up on all the developments of the last 6 months. Let's meet for a beer or two. To find a date that fits the most people please visit https://dudle.inf.tu-dresden.de/Microkernel_Meetup/ and add your preferred day. Regards, Matthias. -- Matthias Lange, matthias.lange@...272..., +49-351-41 888 614 Kernkonzept GmbH. Sitz: Dresden. Amtsgericht Dresden, HRB 31129. GeschÃ¤ftsfÃ¼hrer: Dr.-Ing. Michael Hohmuth

1 1

Rust and Package Versions
by Hinnerk van Bruinehsen 10 Feb '18

10 Feb '18

Hello, today I tried to get run/rust to build and failed. As far as I can tell that happens because newer Rust compilers don't support options, that the old version in the port file depends on. I tried to update the version and made some progress, but I don't have everything working right now. Does anyone have a port with a newer version of Rust that I could try? Somewhat related to that: I noticed similar issues with other ports as well (e.g. bash is version 4.1 (pre shellshock afaict)): is there any interest in updating the ports? If so: would you merge a pull request with such trivial updates? Wkr, Hinnerk

2 1

nitpicker focus
by Boris Mulder 09 Feb '18

09 Feb '18

Hi all, I'm writing a scenario with nitpicker where I want to support pop-ups e.g. for asking the user's password. I made a simple GUI app with a textbox that pops up and disappears when required. However, whenever this popup appears I want nitpicker to immediately change focus to this popup and put it in front of all other nitpicker clients and windows. Now the behaviour is either "click", "transient" or "none", meaning the focus is only given when the user clicks on the window, or never. This is a problem since if some other untrusted app is running in the background, the user could type in his password immediately when the pop-up appears, and the input is then directed to the app instead of the popup itself, allowing the untrusted app to read the password. The only way the user could enter the password correctly at the moment is by clicking on the pop-up before typing. One solution would be handling the focus via a focus report-rom, however when the pop-up is not there I want nitpicker to use its default behaviour (together with the window manager) so that it focuses windows when they are clicked. Reimplementing this default behaviour so it produces the report in this case seems quite ugly. Do you have any ideas what I could try to do to achieve the desired behaviour? From nitpicker's readme: > The focus ROM is expected to have a 'label' attribute with the value set to the label of the to-be focused client. When using an external focus policy, domains configured as "click" are internally handled like "transient" focusable domains. It is up to the external focus policy component to make a new focus permanent by providing an updated "focus" ROM." What if I want to switch between an external and internal focus policy based on which apps are running? Do you think it is easiest to extend nitpicker to have a focus="always" attribute that always focuses a certain client whenever it is up? Or to write a separate complicated focus policy component responsible for all focusing? -- Met vriendelijke groet / kind regards, Boris Mulder Cyber Security Labs B.V. | Gooimeer 6-31 | 1411 DD Naarden | The Netherlands +31 35 631 3253 (office)

2 6

qt5 build problem
by Robert Sutherland 09 Feb '18

09 Feb '18

Hello I have some problems with the qt5 build.Â The first being a sha1sum issue with qtscriptclassic-1.0_1-opensource.Â The initial build gives: qt5Â extract qtwebkit-opensource-src-5.8.0.tar.xz (qtwebkit-opensource-src-5.8.0) Error: Hash sum check for qtscriptclassic-1.0_1-opensource failed make[2]: *** [qtscriptclassic-1.0_1-opensource.file] Error 1 make[1]: *** [_install_in_port_dir] Error 2 make: *** [qt5] Error 2 I ran the sha1sum program on all of the remote archives for *.gz and downloaded the file for *.gz as well, all of which failed. Since a decision tree was included for differing compression formats I chose a *.zip file I could find and ran the sha1sum program to change the verification sum, and then modified the ./repos/libports/ports/qt5.port file. # URL(${QTSCRIPTCLASSIC}) := ftp://ftp.informatik.hu-berlin.de/pub/Mirrors/ftp.troll.no/QT/qt/solutions/lgpl/${QTSCRIPTCLASSIC}.tar.gz # URL(${QTSCRIPTCLASSIC}) := ftp://ftp.pl.vim.org/vol/rzm4/qt.old/solutions/lgpl/${QTSCRIPTCLASSIC}.tar.… # URL(${QTSCRIPTCLASSIC}) := http://ftp.icm.edu.pl/packages/qt.old/solutions/lgpl/${QTSCRIPTCLASSIC}.tar… # URL(${QTSCRIPTCLASSIC}) := /home/rasuth/Downloads/${QTSCRIPTCLASSIC}.tar.gz # SHA(${QTSCRIPTCLASSIC}) := 74e9dc82dd194d8ae0fb0f8f1df74081948b943a URL(${QTSCRIPTCLASSIC}) := http://ftp.icm.edu.pl/packages/qt.old/solutions/lgpl/${QTSCRIPTCLASSIC}.zip SHA(${QTSCRIPTCLASSIC}) := de0d6b6ccbc8b06e4eb8a9eac36741b5d80153a3 DIR(${QTSCRIPTCLASSIC}) := src/lib/qt5/${QTSCRIPTCLASSIC} which appears to work.Â However, during the patch process it asks me for a file to patch.Â I think I understand the 'imaginary' diff --git nature (though this is new to me), but the port preparation then seem to require unexpected interaction. .Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â . qt5Â apply src/lib/qt5/patches/qtwebkit_genode.patch qt5Â apply src/lib/qt5/patches/qtscriptclassic_qt5.patch The text leading up to this was: -------------------------- |qtscriptclassic_qt5.patch | |From: Christian Prochaska <christian.prochaska@...1...> | | |--- | src/qscriptcontextinfo.cppÂ Â Â Â Â Â |Â Â Â 2 - | src/qscriptecmafunction.cppÂ Â Â Â Â |Â Â 12 ++++----- | src/qscriptengine_p.cppÂ Â Â Â Â Â Â Â Â |Â Â 30 ++++++++++++++-------- | src/qscriptextqobject.cppÂ Â Â Â Â Â Â |Â Â 52 +++++++++++++++++--------------------- | src/qscriptstring.cppÂ Â Â Â Â Â Â Â Â Â Â |Â Â Â 1 - | src/qscriptsyntaxcheckresult_p.h |Â Â Â 2 + | src/qscriptvalue.cppÂ Â Â Â Â Â Â Â Â Â Â Â |Â Â Â 4 +-- | src/qscriptvalue.hÂ Â Â Â Â Â Â Â Â Â Â Â Â Â |Â Â Â 4 +-- | src/qscriptvalue_p.hÂ Â Â Â Â Â Â Â Â Â Â Â |Â Â Â 1 - | src/qscriptvalueimpl_p.hÂ Â Â Â Â Â Â Â |Â Â Â 3 +- | 10 files changed, 55 insertions(+), 56 deletions(-) | |diff --git a/src/qscriptcontextinfo.cpp b/src/qscriptcontextinfo.cpp |index ef080ff..df0e555 100644 |--- a/src/qscriptcontextinfo.cpp |+++ b/src/qscriptcontextinfo.cpp -------------------------- File to patch: qtscriptclassic_qt5 qtscriptclassic_qt5: No such file or directory Skip this patch? [y] So did I mangle something when getting qtscriptclassic running? Or do I need to name a file?

4 10

Share a variable of Core with other components
by Jaemin Park 07 Feb '18

07 Feb '18

Hi, I'd like to ask a question about a way to "share a variable of Core with other components". I'm using i.MX53 QSB, so this question is based on 'base-hw' implementation. Suppose that 'Core' has a variable "A" and makes it visible to other components like 'Init' or else. For this, I added a routine to use a Dataspace_capability for "A" in main() of 'Core' as follows: *[repos/base/src/core/main.cc]* *Dataspace_capability ds = env()->ram_session()->alloc(4096);* *unsigned char *local_addr = env()->rm_session()->attach(ds);* However, I faced a difficulty to implement an RPC to delegate(share) the Dataspace_capability to other components. Is there any simple or proper way to share "A" of 'Core' with other components? If possible, please give me an example. Any comment comments would be highly appreciated. JaeminPark

3 7

getaddrinfo - Error: libc suspend() called from non-user context (0x117549a) - aborting
by Johannes Kliemann 07 Feb '18

07 Feb '18

Hi all, when I use the lwip networking I sometimes get the following error: > Error: libc suspend() called from non-user context (0x117549a) - aborting I have tracked it down to a call of getaddrinfo yet I could not find out when exactly and why this happens. It occurs at ca. 50% of the tries. Does anyone have an idea how to fix that? Also is there a way to check if an IP is available? Sleeping a few seconds and hoping that DHCP assigned an address does not seem a reliable solution to me. The full code is available at [1], [2] and [3] while the error happens in [3] at line 24. To test it yourself, check out [4] and run `make run/sntp`. Regards, Johannes [1]: https://github.com/jklmnn/genode-world/blob/sntp/src/server/sntp/main.cc [2]: https://github.com/jklmnn/genode-world/blob/sntp/src/server/sntp/client.h [3]: https://github.com/jklmnn/genode-world/blob/sntp/src/server/sntp/client.cc [4]: https://github.com/jklmnn/genode-world/tree/sntp/src/server/sntp

2 2

FOSDEM 2018 presentations
by Norman Feske 07 Feb '18

07 Feb '18

Hello everyone, the recordings of the following Genode-related talks at FOSDEM 2018 are available now: * GPU resource multiplexing in component-based systems by Sebastian Sumpf https://fosdem.org/2018/schedule/event/microkernel_genode_gpu_multiplexing/ * Live sculpting a Genode-based operating system by Norman Feske https://fosdem.org/2018/schedule/event/microkernel_genode_live_sculpting/ * User-level networking on Genode by Martin Stein https://fosdem.org/2018/schedule/event/microkernel_genode_user_level_networ… I'd like to thank the FOSDEM organizers for the fantastic conference and especially Jakub Jermar who organized this year's microkernel devroom! Cheers Norman -- Dr.-Ing. Norman Feske Genode Labs https://www.genode-labs.com Â· https://genode.org Genode Labs GmbH Â· Amtsgericht Dresden Â· HRB 28424 Â· Sitz Dresden GeschÃ¤ftsfÃ¼hrer: Dr.-Ing. Norman Feske, Christian Helmuth

1 1

Regarding building NOVA kernel
by ROHIT JAISWAL cs16m053 05 Feb '18

05 Feb '18

Hi, I have tried to build NOVA kernel but I am getting error..... <genode-main(a)lists.sourceforge.net> spawn qemu-system-x86_64 -no-kvm -display sdl -cpu core2duo -serial mon:stdio -m 512 -cdrom var/run/demo.iso -cdrom var/run/demo.iso -cdrom var/run/demo.iso qemu-system-x86_64: -display sdl: SDL support is disabled Aborting, received EOF Log step failed, retry. Boot process failed 3 times in series. I give up! make: *** [run/demo] Error 255 I have tried to comment -display sdl in build.conf but i didn't get any output. Please provide solution. -- Regards, Rohit Jaiswal

3 2

Sockets
by Roman Iten 30 Jan '18

30 Jan '18

Hi I have a libc server application that binds a UDP socket and a libc client application to test the server. For this purpose I start two vfs and bridge them using the nic_bridge component: <start name="vfs_client"> <binary name="vfs"/> <provides> <service name="File_system"/> </provides> <config> <vfs> <dir name="socket"> <lxip ip_addr="127.0.0.2" netmask="255.0.0.0" gateway="0.0.0.0" nameserver="0.0.0.0"/> </dir> </vfs> <default-policy root="/socket" writeable="yes"/> </config> <route>  </route> </start> <start name="vfs_server"> <binary name="vfs"/> <provides> <service name="File_system"/> </provides> <config> <vfs> <dir name="socket"> <lxip ip_addr="127.0.0.1" netmask="255.0.0.0" gateway="0.0.0.0" nameserver="0.0.0.0"/> </dir> </vfs> <default-policy root="/socket" writeable="yes"/> </config> <route>  </route> </start> <start name="nic_bridge"> <provides> <service name="Nic"/> </provides> <config> <policy label_prefix="vfs_client" ip_addr="127.0.0.2" /> <policy label_prefix="vfs_server" ip_addr="127.0.0.1" /> </config> <route> <service name="Nic"> <child name="nic_drv"/> </service>  </route> </start> The server successfully binds a UDP socket to 0.0.0.0:1234 but when the client tries to connect to 127.0.0.1:1234 it gets errno 61 (connection refused). I then tried to simplify the scenario because what I actually need is just a loopback interface. I replaced vfs_client and vfs_server by a single vfs and routed the Nic session to nic_loopback. Which leads to the same result (connection refused) when the client tries to connect. What am I missing? Thanks, Roman

2 2

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

users