IRC log for #maemo-ssu on 20141225

00:06.50*** join/#maemo-ssu DrCode (~DrCode@gateway/tor-sasl/drcode)
01:13.30*** join/#maemo-ssu LauRoman (~LauRoman@5-14-158-89.residential.rdsnet.ro)
02:04.54*** join/#maemo-ssu futpib (~futpib@176.96.237.217)
05:33.58*** join/#maemo-ssu Milhouse (~Milhouse@kodi/staff/milhouse)
07:26.27*** join/#maemo-ssu LauRoman|Alt (~LauRoman@5-14-158-89.residential.rdsnet.ro)
07:30.21*** join/#maemo-ssu Pali (~pali@Maemo/community/contributor/Pali)
07:43.49Palimerlin1991: why are calendar-backend, cityinfo, mce, osso-product-info, pulseaudio-policy-enforcement and telepathy-gabble not included in CSSU-T?
07:45.06Palitelepathy-gabble fix video calls with gmail web plugin, pulseaudio-policy-enforcement just disable useless logs in syslos and calendar-backend fix bug 12682
07:45.08povbot_Bug https://bugs.maemo.org/12682 calendar-backend's ICalConverter class does not export proper iCal data
08:21.22*** join/#maemo-ssu dhbiker (~dhbiker@APN-122-94-186-gprs.simobil.net)
08:25.44*** join/#maemo-ssu _rd (~rd@p4FD1C906.dip0.t-ipconnect.de)
08:39.53*** join/#maemo-ssu Pali (~pali@Maemo/community/contributor/Pali)
09:16.46*** join/#maemo-ssu _rd (~rd@p4FD1C906.dip0.t-ipconnect.de)
09:35.13freemangordonPali: didn't you receive merlin1991's mail where he asked us to check if anything is missing?
09:35.37Palido not see it :-(
09:35.49Palisubject/message-id?
09:35.59freemangordonjust a second
09:36.38freemangordonsubject: "CSSU T10 packages"
09:37.20freemangordonPali: also, what am y supposed to look for in nishanth's log?
09:37.30freemangordons/y/I
09:38.38Palifreemangordon: do you have account on that TI forum?
09:38.50freemangordonIIRC yes
09:38.55freemangordonforum?
09:39.10Sicelofreemangordon: quick question -- i was on thumb, then updated to the latest CSSU-T .. now there are no thumb packages on my system .. is this expected?
09:39.21freemangordonSicelo: no
09:39.29freemangordonPali: e2e.ti.com is not a forum afaik
09:39.42Palifreemangordon: e2e.ti.com or whatever it is
09:40.30Palican you ask question how to check at runtime if L3 firewall is enabled for omap sha/aes/md5 crypto driver?
09:41.02freemangordonI guess I can :)
09:41.26freemangordonwill do, after having a lunch as I am starving
09:42.03Siceloi guess i must reinstall thumb again .. otherwise i didn't have any bad effects from this 'downgrade'
09:42.19Siceloor is there another way to check if i'm still on thumb?
09:42.21Paliok, here is kernel panic log which is generated when L3 firewall is not enabled on HS device and omap-aes.ko is loaded: http://thread.gmane.org/gmane.linux.ports.arm.omap/108397/
09:42.47PaliSicelo: check if is deb package has *thumb* in version string
09:43.19Palithats all... if package has thumb substring in version, then it is thumb compiled, otherwise not
10:00.37freemangordonPali: BTW can't you ask on #armlinux?
10:01.28Paliwe already asked on linux arm and omap ML ...
10:01.37freemangordonSicelo: do as Pali said, it makes no sense -testing to overwrite -thumb, unless you have very old version
10:01.41freemangordonPali: ok
10:01.58freemangordonneed to figure out how to ask questions on e2e
10:04.11freemangordonhmm, only omap4 and omap5 forums
10:04.13freemangordon:(
10:06.24Sicelowell, it did, curious
10:12.30*** join/#maemo-ssu arcean (~arcean@aael41.neoplus.adsl.tpnet.pl)
10:12.49freemangordonPali: http://e2e.ti.com/support/dsp/omap_applications_processors/f/447/t/391467
10:13.54Palifreemangordon: thanks!
10:23.28sixwheeledbeastSicelo: you definitely have no thumb packages at all?
10:35.38Siceloi know .. that's why i was asking if the update should have done this. i *did* have thumb before updating to cssu-t. of course it's too late now, haha .. will just reinstall thumb  sometime soon
10:37.57bencohwhat do you mean by "updating to cssu-t" ?
10:38.12*** join/#maemo-ssu futpib (~futpib@176.96.237.217)
11:04.34*** join/#maemo-ssu Pali (~pali@Maemo/community/contributor/Pali)
11:25.23freemangordonPali: for that aes to function, what was needed - new NOLO or new xloader?
11:25.35Paliboth
11:25.44freemangordonhmm, doesn't make sense
11:26.00Paliand even new flasher.rover binary :D
11:26.13freemangordonI know those are packaged together, but is everything different?
11:26.28Paliyes, both nolo and xloader are different
11:26.40PaliI can send binaries via emails
11:27.00freemangordonI have them
11:27.12freemangordonRX-51_2009SE_crypto.tar.gz ?
11:28.55freemangordonPali: did you try to flash only xloader or only nolo?
11:29.25PaliI have n900-crypto.tar.gz, omap-hw.tar.gz, nolo.tar.gz, omap-sha1-md5-standalone.diff, omap-aes-standalone.diff
11:29.37PaliI did not tried to flash that images yet
11:30.02freemangordonPali: my idea is - find how is that FW enabled and where (nolo or xloader), then find a way to do it from the kernel itself
11:30.15Palibut I will try on testing N900 from Doc in January
11:30.35freemangordonI bet there is some SMC that can be (ab)used
11:30.58Palitmlind suggested to dump some omap regs on normal xloader and that patched xloader if they are different
11:30.58freemangordonBTW ARM hexrays works on both nolo and xloader
11:31.12freemangordonPali: yep, makes sense
11:31.25Palimaybe it can be used for that runtime detection
11:31.47PaliI was told that new patched xloader (or NOLO??) has linked some binary blob from TI which doing something
11:31.52Palineeded for omap aes
11:32.00freemangordonhmm
11:32.20PaliI think it will be just example blob which enable L3 firewall
11:32.38freemangordonenable?
11:32.47freemangordonor rather disable
11:33.20Palienable access
11:33.43Paliin public TRM is written something about configuring L3 firewall for GP devices
11:34.52freemangordonwhich TRM, 35xx?
11:35.06PaliOMAP34xx_ES3.1.x_PUBLIC_TRM_vZT.pdf
11:35.31freemangordonI have ZM here, shouldnt be that much different
11:36.55Pali5.2 L3 Interconnect
11:37.59freemangordonyeah, I am reading through it
11:38.10freemangordonnot that I understand what is written there :D
11:39.11Pali5.2.5.4.1 Protection Mechanism (PM) Register Description
11:39.53Palithere is L3_PM_REQ_INFO_PERMISSION_i and L3_PM_READ_PERMISSION_i
11:40.23Paliand L3_PM_ADDR_MATCH_k
11:40.56PaliI think some of those registers we should use
11:41.09Palibut I do not understand that documents too :-(
11:47.16freemangordonhmm, xloader and nolo are SMALLER in RX-51_2009SE_crypto.tar.gz than in PR1.3 fiasko
11:59.35Palifreemangordon: can you tell me sha1sum of RX-51_2009SE_crypto.tar.gz?
12:00.11PaliI have: cf6eac7aed41b5161d50c0361378f6bd1cc06d28  n900-crypto.tar.gz
12:09.55*** join/#maemo-ssu dhbiker (~dhbiker@APN-123-231-77-gprs.simobil.net)
12:16.06freemangordonPali: same here
12:32.40freemangordonPali: hmm, I can;t see anything different in xloader, besides date string and some other trivial stuff
12:32.45freemangordonso it must be in nolo
12:37.39Palireally? xloader is same?
12:38.48Palifreemangordon: then we should be able to enable aes from kernel...
12:39.19PaliI still do not know why was needed new flasher binary for flashing...
12:39.31PaliI think it is doing same calls
12:39.51Paliit just extend Mk II flashing protocol which is used in PC-Suite and Update mode
12:40.24Palibut I did not see anything new in normal flashing
12:44.36freemangordonPali: I guess dmitry just packaged it all together, for consistency
12:44.45freemangordonit was dmitry, correct?
12:45.32Paliyes
12:45.36Pali"In order to use AES hw it is necessary to enable it during boot from Secure side."
12:45.43Pali"It is done by special code which is compiled as part of bootloader."
12:46.02Pali"You need special boot loader, because it has secure code to enable it.."
12:46.10Pali"You cannot do it from non-secure side."
12:46.22Pali"Nolo has binary blob for that."
12:46.45freemangordonsee, it is nolo
12:46.52Palifrom Dmitry Kasatkin
12:47.22*** join/#maemo-ssu _rd (~rd@p4FD1C906.dip0.t-ipconnect.de)
12:47.31PaliI think that with NOLO he means both xloader+secondary images
12:47.35Palibut do not know now...
12:47.47freemangordonmaybe there is modified PPA in NOLO which enables it
12:48.18freemangordonchecks NOLO
12:48.18Paliis NOLO running as secure or non secure?
12:48.27freemangordonnon-secure AFAIK
12:48.40freemangordonbut PPA runs in secure mode
12:48.58freemangordonand afaik PPA is loaded by SMC call
12:49.08Palithen only x-loader can set own PPA call
12:49.21freemangordonhmm, no, nolo can do it as well
12:49.43freemangordonit just needs to issue the correct SMC
12:49.45Palithen you should do it also from kernel
12:50.00freemangordonnot sure we can do it, as PPA is signed
12:50.12freemangordonbut yes, I guess we can load PPA from kernel
12:50.29Palihttp://www.droid-developers.org/wiki/Category:Security
12:50.33freemangordonif we have the blob and the signature
12:50.53Palihttp://www.droid-developers.org/wiki/Secure_Services
12:51.49Palilooks like some services are SW
12:52.14freemangordonSW?
12:52.30Paliloaded by SW
12:52.45freemangordonyep, my point exactly
12:53.04freemangordonyou can load PA by issuing a SMC call
12:53.33Palithen it looks like NOLO loads its own service for HW rng and allow kernel to use it via SMC
12:53.50freemangordonso, maybe it is possible to strip that blob (and signature) from NOLO and load it from kernel
12:53.59freemangordon:nod:
12:54.27Palipossible
12:56.50freemangordonhmm, NOLO is completely different, from the start
12:59.47freemangordonPali: do you remember at which address is NOLO loaded?
13:01.32Palimaybe 0x80400000
13:01.41freemangordonthanks
13:02.20Paliit is what I have in unfinished spl port of uboot
13:05.58Pali~ping
13:05.58infobot~pong
13:06.57*** join/#maemo-ssu M4rtinK (~M4rtinK@mail.melf.eu)
13:07.18Paliyes, in uboot is comment that Nokia X-Loader loads secondary image to address 0x80400000
13:07.49Pali~ping
13:07.49infobot~pong
13:38.58*** part/#maemo-ssu sixwheeledbeast (~zem@lagrange.cloud-7.de)
13:39.35*** join/#maemo-ssu sixwheeledbeast (~zem@lagrange.cloud-7.de)
13:56.34*** part/#maemo-ssu sixwheeledbeast (~zem@lagrange.cloud-7.de)
14:13.43*** join/#maemo-ssu sixwheeledbeast (~zem@lagrange.cloud-7.de)
14:14.55merlin1991Pali: I'll prepare a T10.1 in jan that will include the missing bits
14:15.09Paliok
14:18.09merlin1991I'd do it this week, but starting with the 27th I'll be gone untill the 1st, don't want to risk it that I botch something and the repo is foobar for so long
14:45.35freemangordonPali: oh, modified nolo seems to set IBE bit in aux CR :)
15:08.51*** join/#maemo-ssu sparetire_ (~sparetire@unaffiliated/sparetire)
15:47.52freemangordonPali: dammit, I can't find significant differences in NOLO either, besides this IBE bit in ACR, but it should be unrelated :(
16:38.40*** join/#maemo-ssu futpib (~futpib@176.96.237.217)
16:48.45*** join/#maemo-ssu _rd (~rd@p4FD1C906.dip0.t-ipconnect.de)
18:09.45Palifunny...
18:10.04Palineed to flash all combinations of nolos and xloaders and see what happens...
21:17.12*** join/#maemo-ssu nox- (noident@freebsd/developer/nox)

Generated by irclog2html.pl Modified by Tim Riker to work with infobot.