From 990e03ec5abb378055a03e8da706387184fdf3df Mon Sep 17 00:00:00 2001 From: Tobin Feldman-Fitzthum Date: Thu, 16 Jan 2025 13:32:52 -0600 Subject: [PATCH] tests: change policy for new tcb claims extension We query the TCB claims to see which platform the evidence came from. Now that the TCB claims are in a new place, the policy will need to be adjusted slightly. This is a bit inconvenient but it shows why it's important to use the right extension in the first place. It's potentially very confusing to see veraison stuff in our policy. Signed-off-by: Tobin Feldman-Fitzthum --- kbs/test/Makefile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/kbs/test/Makefile b/kbs/test/Makefile index 515824978..a753044a3 100644 --- a/kbs/test/Makefile +++ b/kbs/test/Makefile @@ -46,7 +46,7 @@ package policy default allow = false allow { - input["submods"]["cpu"]["ear.veraison.annotated-evidence"]["$(TEE)"] + input["submods"]["cpu"]["ear.trustee.tcb_claims"]["$(TEE)"] } endef export TEE_POLICY_REGO