Lily Sturmann

Better error handling and algo validation for `create_allowlist.sh`

2

# Environment * OS / version: Fedora 36 * Processor architecture: x86_64 * TPM Manufacturer: N/A * Keylime version: latest # Description If I accidentally run `./scripts/create_allowlist.sh` with incorrect parameters,...

Roadmap for official Rust agent

2

This is an issue to keep track of todo items around deprecating the current Python agent and instead using the Rust agent as the official Keylime agent. This is meant...

Path to deprecation for loading revocation actions as Python modules

2

As discussed with @THS-on and @mpeters , there is not an advantage of running revocation actions as Python modules, and it would be better to directly execute both Python and...

Provide default revocation actions template

4

We had an idea in the Rust agent sync-up meeting that it could be useful for people using Keylime to have some default revocation actions to choose from in addition...

Check shard config file data against actual shards

2

The shard config data should be a (strict or not) subset of actual shards. That is, it should not contain any treeIDs that don't exist in trillian in reality. We...

I think these all refer to the same thing, so they should have one term. I propose `TreeID`, as that's what is used in the `logRangesMap` flag added by @dlorenc...

This relates to the sharding work, ex. #487 . There are many places in the code that refer to a UUID. However, the new, longer UUID is called an "EntryID"...

The syscall handler for exit_group in the SGX shim should handle multiple threads and exit all of the threads in the calling process's thread group.

Add documentation for ExitInfo struct

1

Make sure fields like `valid` are clearly documented.

Currently these are set to fail, but we need them to actually work in the future. Also, we need to to checks on the addr parameter to make sure it...