Repository navigation
soc: apple: guard Touch ID enrolment and recover exact identities - #517
Closed
RyanTheTide wants to merge 13 commits into
Closed
RyanTheTide wants to merge 13 commits into
RyanTheTide wants to merge 13 commits into
Conversation
Validate enrolment metadata and durable Linux bindings before capture. Prepare an empty owner context only after userspace has validated the account. Expose Linux user-context identities and an exact-ID recovery delete, saving owner, user and master Catacombs before reporting success. Report the identity returned by the enclave at match time. Assisted-by: LLM Signed-off-by: Ryan Murray <ryan@aurorasilicon.org>
Install a utility that lists the selected Linux SEP user context and deletes one named identity while requiring the operator to name identities that must remain. Document the recovery and admission sequence and test the CLI and package sources. Assisted-by: LLM Signed-off-by: Ryan Murray <ryan@aurorasilicon.org>
Use the identity-bag snapshot when recovery still has a verified bag binding. Reserve the owner-Catacomb fallback for an unbound orphan and require the persisted Linux bag file before the irreversible enclave delete. Assisted-by: LLM Signed-off-by: Ryan Murray <ryan@aurorasilicon.org>
The scoped list, exact-ID delete and empty-owner preparation require the Linux identity bag to be designated and persisted before issuing SBIO commands. Assisted-by: LLM Signed-off-by: Ryan Murray <81541646+RyanTheTide@users.noreply.github.com>
Run the scoped ioctl size check and existing recovery/package tests on Linux for SEP pull requests. Assisted-by: LLM Signed-off-by: Ryan Murray <81541646+RyanTheTide@users.noreply.github.com>
The Fedora and Arch packages install the utility with mode 0755; keep the source mode aligned with kernel checkpatch conventions. Assisted-by: LLM Signed-off-by: Ryan Murray <81541646+RyanTheTide@users.noreply.github.com>
Compile and execute the driver deletion orchestration with scripted enclave and persistence outcomes. Check that an indexed fprintd orphan is removable by exact ID and that failed saves retain the host index for retry. Assisted-by: LLM Signed-off-by: Ryan Murray <81541646+RyanTheTide@users.noreply.github.com>
Compile the kernel admission functions in a host harness and exercise missing UID, unknown finger, OS identity, bag, Catacomb and storage-capacity refusals before hardware testing. Assisted-by: LLM Signed-off-by: Ryan Murray <81541646+RyanTheTide@users.noreply.github.com>
Check sensor availability, identity-bag file writability and host index capacity before PREPARE_ENROL selects or saves an empty owner context. Assisted-by: LLM Signed-off-by: Ryan Murray <81541646+RyanTheTide@users.noreply.github.com>
Create and sync the missing Linux owner file before SELECT_CONTEXT writes to the enclave. Refuse an existing invalid file without truncating its failure evidence. Assisted-by: LLM Signed-off-by: Ryan Murray <81541646+RyanTheTide@users.noreply.github.com>
Execute the driver preflight function with a scripted file backend and verify that a corrupt existing owner file is not truncated before SEP context writes. Assisted-by: LLM Signed-off-by: Ryan Murray <81541646+RyanTheTide@users.noreply.github.com>
Add a targeted arm64 module build so the biometric driver changes receive a kernel type-check in addition to the source and synthetic tests. Assisted-by: LLM Signed-off-by: Ryan Murray <81541646+RyanTheTide@users.noreply.github.com>
Enable KUnit and the SEP test configuration for the targeted Rust module build so the new admission and identity tests are compiled. Assisted-by: LLM Signed-off-by: Ryan Murray <81541646+RyanTheTide@users.noreply.github.com>
Contributor
Author
|
Merged into aurora-wip through #534 (2026-10-28 consolidation). aurora-wip is the home for WIP from here on. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Paired userspace change: aurora-silicon/aurora-sep-userspace#3.
Verification
Assisted-by: LLM