00:06.50 | *** join/#maemo-ssu DrCode (~DrCode@gateway/tor-sasl/drcode) |
01:13.30 | *** join/#maemo-ssu LauRoman (~LauRoman@5-14-158-89.residential.rdsnet.ro) |
02:04.54 | *** join/#maemo-ssu futpib (~futpib@176.96.237.217) |
05:33.58 | *** join/#maemo-ssu Milhouse (~Milhouse@kodi/staff/milhouse) |
07:26.27 | *** join/#maemo-ssu LauRoman|Alt (~LauRoman@5-14-158-89.residential.rdsnet.ro) |
07:30.21 | *** join/#maemo-ssu Pali (~pali@Maemo/community/contributor/Pali) |
07:43.49 | Pali | merlin1991: why are calendar-backend, cityinfo, mce, osso-product-info, pulseaudio-policy-enforcement and telepathy-gabble not included in CSSU-T? |
07:45.06 | Pali | telepathy-gabble fix video calls with gmail web plugin, pulseaudio-policy-enforcement just disable useless logs in syslos and calendar-backend fix bug 12682 |
07:45.08 | povbot_ | Bug https://bugs.maemo.org/12682 calendar-backend's ICalConverter class does not export proper iCal data |
08:21.22 | *** join/#maemo-ssu dhbiker (~dhbiker@APN-122-94-186-gprs.simobil.net) |
08:25.44 | *** join/#maemo-ssu _rd (~rd@p4FD1C906.dip0.t-ipconnect.de) |
08:39.53 | *** join/#maemo-ssu Pali (~pali@Maemo/community/contributor/Pali) |
09:16.46 | *** join/#maemo-ssu _rd (~rd@p4FD1C906.dip0.t-ipconnect.de) |
09:35.13 | freemangordon | Pali: didn't you receive merlin1991's mail where he asked us to check if anything is missing? |
09:35.37 | Pali | do not see it :-( |
09:35.49 | Pali | subject/message-id? |
09:35.59 | freemangordon | just a second |
09:36.38 | freemangordon | subject: "CSSU T10 packages" |
09:37.20 | freemangordon | Pali: also, what am y supposed to look for in nishanth's log? |
09:37.30 | freemangordon | s/y/I |
09:38.38 | Pali | freemangordon: do you have account on that TI forum? |
09:38.50 | freemangordon | IIRC yes |
09:38.55 | freemangordon | forum? |
09:39.10 | Sicelo | freemangordon: quick question -- i was on thumb, then updated to the latest CSSU-T .. now there are no thumb packages on my system .. is this expected? |
09:39.21 | freemangordon | Sicelo: no |
09:39.29 | freemangordon | Pali: e2e.ti.com is not a forum afaik |
09:39.42 | Pali | freemangordon: e2e.ti.com or whatever it is |
09:40.30 | Pali | can you ask question how to check at runtime if L3 firewall is enabled for omap sha/aes/md5 crypto driver? |
09:41.02 | freemangordon | I guess I can :) |
09:41.26 | freemangordon | will do, after having a lunch as I am starving |
09:42.03 | Sicelo | i guess i must reinstall thumb again .. otherwise i didn't have any bad effects from this 'downgrade' |
09:42.19 | Sicelo | or is there another way to check if i'm still on thumb? |
09:42.21 | Pali | ok, here is kernel panic log which is generated when L3 firewall is not enabled on HS device and omap-aes.ko is loaded: http://thread.gmane.org/gmane.linux.ports.arm.omap/108397/ |
09:42.47 | Pali | Sicelo: check if is deb package has *thumb* in version string |
09:43.19 | Pali | thats all... if package has thumb substring in version, then it is thumb compiled, otherwise not |
10:00.37 | freemangordon | Pali: BTW can't you ask on #armlinux? |
10:01.28 | Pali | we already asked on linux arm and omap ML ... |
10:01.37 | freemangordon | Sicelo: do as Pali said, it makes no sense -testing to overwrite -thumb, unless you have very old version |
10:01.41 | freemangordon | Pali: ok |
10:01.58 | freemangordon | need to figure out how to ask questions on e2e |
10:04.11 | freemangordon | hmm, only omap4 and omap5 forums |
10:04.13 | freemangordon | :( |
10:06.24 | Sicelo | well, it did, curious |
10:12.30 | *** join/#maemo-ssu arcean (~arcean@aael41.neoplus.adsl.tpnet.pl) |
10:12.49 | freemangordon | Pali: http://e2e.ti.com/support/dsp/omap_applications_processors/f/447/t/391467 |
10:13.54 | Pali | freemangordon: thanks! |
10:23.28 | sixwheeledbeast | Sicelo: you definitely have no thumb packages at all? |
10:35.38 | Sicelo | i know .. that's why i was asking if the update should have done this. i *did* have thumb before updating to cssu-t. of course it's too late now, haha .. will just reinstall thumb sometime soon |
10:37.57 | bencoh | what do you mean by "updating to cssu-t" ? |
10:38.12 | *** join/#maemo-ssu futpib (~futpib@176.96.237.217) |
11:04.34 | *** join/#maemo-ssu Pali (~pali@Maemo/community/contributor/Pali) |
11:25.23 | freemangordon | Pali: for that aes to function, what was needed - new NOLO or new xloader? |
11:25.35 | Pali | both |
11:25.44 | freemangordon | hmm, doesn't make sense |
11:26.00 | Pali | and even new flasher.rover binary :D |
11:26.13 | freemangordon | I know those are packaged together, but is everything different? |
11:26.28 | Pali | yes, both nolo and xloader are different |
11:26.40 | Pali | I can send binaries via emails |
11:27.00 | freemangordon | I have them |
11:27.12 | freemangordon | RX-51_2009SE_crypto.tar.gz ? |
11:28.55 | freemangordon | Pali: did you try to flash only xloader or only nolo? |
11:29.25 | Pali | I have n900-crypto.tar.gz, omap-hw.tar.gz, nolo.tar.gz, omap-sha1-md5-standalone.diff, omap-aes-standalone.diff |
11:29.37 | Pali | I did not tried to flash that images yet |
11:30.02 | freemangordon | Pali: my idea is - find how is that FW enabled and where (nolo or xloader), then find a way to do it from the kernel itself |
11:30.15 | Pali | but I will try on testing N900 from Doc in January |
11:30.35 | freemangordon | I bet there is some SMC that can be (ab)used |
11:30.58 | Pali | tmlind suggested to dump some omap regs on normal xloader and that patched xloader if they are different |
11:30.58 | freemangordon | BTW ARM hexrays works on both nolo and xloader |
11:31.12 | freemangordon | Pali: yep, makes sense |
11:31.25 | Pali | maybe it can be used for that runtime detection |
11:31.47 | Pali | I was told that new patched xloader (or NOLO??) has linked some binary blob from TI which doing something |
11:31.52 | Pali | needed for omap aes |
11:32.00 | freemangordon | hmm |
11:32.20 | Pali | I think it will be just example blob which enable L3 firewall |
11:32.38 | freemangordon | enable? |
11:32.47 | freemangordon | or rather disable |
11:33.20 | Pali | enable access |
11:33.43 | Pali | in public TRM is written something about configuring L3 firewall for GP devices |
11:34.52 | freemangordon | which TRM, 35xx? |
11:35.06 | Pali | OMAP34xx_ES3.1.x_PUBLIC_TRM_vZT.pdf |
11:35.31 | freemangordon | I have ZM here, shouldnt be that much different |
11:36.55 | Pali | 5.2 L3 Interconnect |
11:37.59 | freemangordon | yeah, I am reading through it |
11:38.10 | freemangordon | not that I understand what is written there :D |
11:39.11 | Pali | 5.2.5.4.1 Protection Mechanism (PM) Register Description |
11:39.53 | Pali | there is L3_PM_REQ_INFO_PERMISSION_i and L3_PM_READ_PERMISSION_i |
11:40.23 | Pali | and L3_PM_ADDR_MATCH_k |
11:40.56 | Pali | I think some of those registers we should use |
11:41.09 | Pali | but I do not understand that documents too :-( |
11:47.16 | freemangordon | hmm, xloader and nolo are SMALLER in RX-51_2009SE_crypto.tar.gz than in PR1.3 fiasko |
11:59.35 | Pali | freemangordon: can you tell me sha1sum of RX-51_2009SE_crypto.tar.gz? |
12:00.11 | Pali | I have: cf6eac7aed41b5161d50c0361378f6bd1cc06d28 n900-crypto.tar.gz |
12:09.55 | *** join/#maemo-ssu dhbiker (~dhbiker@APN-123-231-77-gprs.simobil.net) |
12:16.06 | freemangordon | Pali: same here |
12:32.40 | freemangordon | Pali: hmm, I can;t see anything different in xloader, besides date string and some other trivial stuff |
12:32.45 | freemangordon | so it must be in nolo |
12:37.39 | Pali | really? xloader is same? |
12:38.48 | Pali | freemangordon: then we should be able to enable aes from kernel... |
12:39.19 | Pali | I still do not know why was needed new flasher binary for flashing... |
12:39.31 | Pali | I think it is doing same calls |
12:39.51 | Pali | it just extend Mk II flashing protocol which is used in PC-Suite and Update mode |
12:40.24 | Pali | but I did not see anything new in normal flashing |
12:44.36 | freemangordon | Pali: I guess dmitry just packaged it all together, for consistency |
12:44.45 | freemangordon | it was dmitry, correct? |
12:45.32 | Pali | yes |
12:45.36 | Pali | "In order to use AES hw it is necessary to enable it during boot from Secure side." |
12:45.43 | Pali | "It is done by special code which is compiled as part of bootloader." |
12:46.02 | Pali | "You need special boot loader, because it has secure code to enable it.." |
12:46.10 | Pali | "You cannot do it from non-secure side." |
12:46.22 | Pali | "Nolo has binary blob for that." |
12:46.45 | freemangordon | see, it is nolo |
12:46.52 | Pali | from Dmitry Kasatkin |
12:47.22 | *** join/#maemo-ssu _rd (~rd@p4FD1C906.dip0.t-ipconnect.de) |
12:47.31 | Pali | I think that with NOLO he means both xloader+secondary images |
12:47.35 | Pali | but do not know now... |
12:47.47 | freemangordon | maybe there is modified PPA in NOLO which enables it |
12:48.18 | freemangordon | checks NOLO |
12:48.18 | Pali | is NOLO running as secure or non secure? |
12:48.27 | freemangordon | non-secure AFAIK |
12:48.40 | freemangordon | but PPA runs in secure mode |
12:48.58 | freemangordon | and afaik PPA is loaded by SMC call |
12:49.08 | Pali | then only x-loader can set own PPA call |
12:49.21 | freemangordon | hmm, no, nolo can do it as well |
12:49.43 | freemangordon | it just needs to issue the correct SMC |
12:49.45 | Pali | then you should do it also from kernel |
12:50.00 | freemangordon | not sure we can do it, as PPA is signed |
12:50.12 | freemangordon | but yes, I guess we can load PPA from kernel |
12:50.29 | Pali | http://www.droid-developers.org/wiki/Category:Security |
12:50.33 | freemangordon | if we have the blob and the signature |
12:50.53 | Pali | http://www.droid-developers.org/wiki/Secure_Services |
12:51.49 | Pali | looks like some services are SW |
12:52.14 | freemangordon | SW? |
12:52.30 | Pali | loaded by SW |
12:52.45 | freemangordon | yep, my point exactly |
12:53.04 | freemangordon | you can load PA by issuing a SMC call |
12:53.33 | Pali | then it looks like NOLO loads its own service for HW rng and allow kernel to use it via SMC |
12:53.50 | freemangordon | so, maybe it is possible to strip that blob (and signature) from NOLO and load it from kernel |
12:53.59 | freemangordon | :nod: |
12:54.27 | Pali | possible |
12:56.50 | freemangordon | hmm, NOLO is completely different, from the start |
12:59.47 | freemangordon | Pali: do you remember at which address is NOLO loaded? |
13:01.32 | Pali | maybe 0x80400000 |
13:01.41 | freemangordon | thanks |
13:02.20 | Pali | it is what I have in unfinished spl port of uboot |
13:05.58 | Pali | ~ping |
13:05.58 | infobot | ~pong |
13:06.57 | *** join/#maemo-ssu M4rtinK (~M4rtinK@mail.melf.eu) |
13:07.18 | Pali | yes, in uboot is comment that Nokia X-Loader loads secondary image to address 0x80400000 |
13:07.49 | Pali | ~ping |
13:07.49 | infobot | ~pong |
13:38.58 | *** part/#maemo-ssu sixwheeledbeast (~zem@lagrange.cloud-7.de) |
13:39.35 | *** join/#maemo-ssu sixwheeledbeast (~zem@lagrange.cloud-7.de) |
13:56.34 | *** part/#maemo-ssu sixwheeledbeast (~zem@lagrange.cloud-7.de) |
14:13.43 | *** join/#maemo-ssu sixwheeledbeast (~zem@lagrange.cloud-7.de) |
14:14.55 | merlin1991 | Pali: I'll prepare a T10.1 in jan that will include the missing bits |
14:15.09 | Pali | ok |
14:18.09 | merlin1991 | I'd do it this week, but starting with the 27th I'll be gone untill the 1st, don't want to risk it that I botch something and the repo is foobar for so long |
14:45.35 | freemangordon | Pali: oh, modified nolo seems to set IBE bit in aux CR :) |
15:08.51 | *** join/#maemo-ssu sparetire_ (~sparetire@unaffiliated/sparetire) |
15:47.52 | freemangordon | Pali: dammit, I can't find significant differences in NOLO either, besides this IBE bit in ACR, but it should be unrelated :( |
16:38.40 | *** join/#maemo-ssu futpib (~futpib@176.96.237.217) |
16:48.45 | *** join/#maemo-ssu _rd (~rd@p4FD1C906.dip0.t-ipconnect.de) |
18:09.45 | Pali | funny... |
18:10.04 | Pali | need to flash all combinations of nolos and xloaders and see what happens... |
21:17.12 | *** join/#maemo-ssu nox- (noident@freebsd/developer/nox) |