Re: [tpm2] tools: tcti init allocation route failed for library "tabrmd"

Re: [tpm2] tools: tcti init allocation route failed for library "tabrmd"

[Javier Martinez Canillas]

[-- Attachment #1: Type: text/plain, Size: 1043 bytes --]

Hi Peter,

On 06/26/2018 08:40 PM, Scheie, Peter M wrote:
> I'm trying to get the tools working with the emulator, on a CentOS 7 VM.  I've got tss 2.0.0, abrmd 2.0.0, tools 3.1.0, and the IBM emulator 1119.  Everything compiles and installs okay, the emulator is running, I start abrmd with 'sudo -u tss /tmp/tpm2/sbin/tpm2-abrmd --tcti=libtss2-tcti-mssim.s' and the emulator says 'Client accepted'.  However, when I then run, say, tpm2_pcrlist, I get this error:
> 
> WARNING: Failed to create connection with service: GDBus.Error:org.freedesktop.DBus.Error.NoReply: Message recipient disconnected from message bus without replying
> ERROR: tcti init allocation routine failed for library: "tabrmd" options: "(null)"
> ERROR: Could not load tcti, got: "tabrmd"
> 
> And then abrmd crashes, while the emulator reports 'read() error.  Error is 2 No such file or directory'.
> 
> Suggestions?
>

That very much sounds like a SELinux issue, did you try putting SELinux in
permissive mode (setenforce 0) ?

Best regards,
Javier

Re: [tpm2] tools: tcti init allocation route failed for library "tabrmd"

[Javier Martinez Canillas]

[-- Attachment #1: Type: text/plain, Size: 2078 bytes --]

Hi Peter,

On Thu, Jun 28, 2018 at 3:24 PM, Scheie, Peter M <Petre.Scheie(a)gd-ms.com>
wrote:

> -----Original Message-----
> From: tpm2 [mailto:tpm2-bounces(a)lists.01.org] On Behalf Of Javier
> Martinez Canillas
> Sent: Thursday, June 28, 2018 7:23 AM
> To: tpm2(a)lists.01.org
> Subject: Re: [tpm2] tools: tcti init allocation route failed for library
> "tabrmd"
>
> Hi Peter,
>
> On 06/26/2018 08:40 PM, Scheie, Peter M wrote:
> > I'm trying to get the tools working with the emulator, on a CentOS 7
> VM.  I've got tss 2.0.0, abrmd 2.0.0, tools 3.1.0, and the IBM emulator
> 1119.  Everything compiles and installs okay, the emulator is running, I
> start abrmd with 'sudo -u tss /tmp/tpm2/sbin/tpm2-abrmd
> --tcti=libtss2-tcti-mssim.s' and the emulator says 'Client accepted'.
> However, when I then run, say, tpm2_pcrlist, I get this error:
> >
> > WARNING: Failed to create connection with service:
> GDBus.Error:org.freedesktop.DBus.Error.NoReply: Message recipient
> disconnected from message bus without replying
>
> ERROR: tcti init allocation routine failed for library: "tabrmd" options:
> "(null)"
> > ERROR: Could not load tcti, got: "tabrmd"
> >
> > And then abrmd crashes, while the emulator reports 'read() error.  Error
> is 2 No such file or directory'.
> >
> > Suggestions?
> >
>
> That very much sounds like a SELinux issue, did you try putting SELinux in
> permissive mode (setenforce 0) ?
>
> Best regards,
> Javier
>
> ############################################################
>
> Javier,
> That was it!  Thank you!  BTW, what tipped you off that SELinux was
> getting in the way?
>
>
Right, I should had say "the" SELinux issue. There is a need for an SELinux
AV rule to make the latest tpm2-abrmd to work on Fedora / CentOS.

You can build the SELinux policy module with:

$ sudo yum install selinux-policy-devel
$ pushd tpm2-abrmd/selinux && make -f /usr/share/selinux/devel/Makefile
tabrmd.pp
$ sudo semodule -i tabrmd.pp
$ sudo restorecon /path/to/tpm2-abrmd

Best regards,
Javier

[-- Attachment #2: attachment.html --]
[-- Type: text/html, Size: 2995 bytes --]

Re: [tpm2] tools: tcti init allocation route failed for library "tabrmd"

[Scheie, Peter M]

[-- Attachment #1: Type: text/plain, Size: 1613 bytes --]

-----Original Message-----
From: tpm2 [mailto:tpm2-bounces(a)lists.01.org] On Behalf Of Javier Martinez Canillas
Sent: Thursday, June 28, 2018 7:23 AM
To: tpm2(a)lists.01.org
Subject: Re: [tpm2] tools: tcti init allocation route failed for library "tabrmd"

Hi Peter,

On 06/26/2018 08:40 PM, Scheie, Peter M wrote:
> I'm trying to get the tools working with the emulator, on a CentOS 7 VM.  I've got tss 2.0.0, abrmd 2.0.0, tools 3.1.0, and the IBM emulator 1119.  Everything compiles and installs okay, the emulator is running, I start abrmd with 'sudo -u tss /tmp/tpm2/sbin/tpm2-abrmd --tcti=libtss2-tcti-mssim.s' and the emulator says 'Client accepted'.  However, when I then run, say, tpm2_pcrlist, I get this error:
> 
> WARNING: Failed to create connection with service: GDBus.Error:org.freedesktop.DBus.Error.NoReply: Message recipient disconnected from message bus without replying
> ERROR: tcti init allocation routine failed for library: "tabrmd" options: "(null)"
> ERROR: Could not load tcti, got: "tabrmd"
> 
> And then abrmd crashes, while the emulator reports 'read() error.  Error is 2 No such file or directory'.
> 
> Suggestions?
>

That very much sounds like a SELinux issue, did you try putting SELinux in
permissive mode (setenforce 0) ?

Best regards,
Javier

############################################################

Javier,
That was it!  Thank you!  BTW, what tipped you off that SELinux was getting in the way?

Peter
_______________________________________________
tpm2 mailing list
tpm2(a)lists.01.org
https://lists.01.org/mailman/listinfo/tpm2

[tpm2] tools: tcti init allocation route failed for library "tabrmd"

[Scheie, Peter M]

[-- Attachment #1: Type: text/plain, Size: 824 bytes --]

I'm trying to get the tools working with the emulator, on a CentOS 7 VM.  I've got tss 2.0.0, abrmd 2.0.0, tools 3.1.0, and the IBM emulator 1119.  Everything compiles and installs okay, the emulator is running, I start abrmd with 'sudo -u tss /tmp/tpm2/sbin/tpm2-abrmd --tcti=libtss2-tcti-mssim.s' and the emulator says 'Client accepted'.  However, when I then run, say, tpm2_pcrlist, I get this error:

WARNING: Failed to create connection with service: GDBus.Error:org.freedesktop.DBus.Error.NoReply: Message recipient disconnected from message bus without replying
ERROR: tcti init allocation routine failed for library: "tabrmd" options: "(null)"
ERROR: Could not load tcti, got: "tabrmd"

And then abrmd crashes, while the emulator reports 'read() error.  Error is 2 No such file or directory'.

Suggestions?

[-- Attachment #2: attachment.html --]
[-- Type: text/html, Size: 5624 bytes --]