Skip to content

Commit

Permalink
tests: change policy for new tcb claims extension
Browse files Browse the repository at this point in the history
We query the TCB claims to see which platform the evidence came from.
Now that the TCB claims are in a new place, the policy will need to be
adjusted slightly.

This is a bit inconvenient but it shows why it's important to use the
right extension in the first place. It's potentially very confusing to
see veraison stuff in our policy.

Signed-off-by: Tobin Feldman-Fitzthum <tobin@ibm.com>
  • Loading branch information
fitzthum committed Jan 16, 2025
1 parent c65c069 commit 990e03e
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion kbs/test/Makefile
Original file line number Diff line number Diff line change
Expand Up @@ -46,7 +46,7 @@ package policy
default allow = false

allow {
input["submods"]["cpu"]["ear.veraison.annotated-evidence"]["$(TEE)"]
input["submods"]["cpu"]["ear.trustee.tcb_claims"]["$(TEE)"]
}
endef
export TEE_POLICY_REGO
Expand Down

0 comments on commit 990e03e

Please sign in to comment.