Open Trusted Computing on L4

Welcome to OpenTC on L4!

News

15/04/2008 - April snapshot released. For a complete list of changes, have a look at the Changelog.

• L4Linux upgraded to version 2.6.24
• Migration support, software-suspend features added
• Dice upgraded to version 3.3.0
• Support of UTCB IPC by IDL code
• DDE 2.6 updated to Linux 2.6.20.19
• Improved prototype of Basic Management and Security Interface (BMSI) using a light-weight TPM multiplexer (lyon)
• Communication isolation leveraging Fiasco IPC monitor extension and L4Env IPCmon support
• vTPM based on tpmemulator project started, small TPM console
• Ready to run snapshot demos:
  • Live migration of L4Linux instances - suspending, snapshoting and resuming L4Linux
  • BMSI in action, isolation of L4Linux'es by restricting IPC
  • Isolating L4Linux'es on network layer by ORe

30/09/2007 - September snapshot released. For a complete list of changes, have a look at the Changelog within the source tarball.

• Added user-level support for memory-resource limits
• L4Linux upgraded to version 2.6.22 with software-suspend support
• Dice upgraded to version 3.2.1
• DDE 2.6 updated to Linux 2.6.19
• ORe now uses Linux-2.6 drivers by default
• Hierarchical task library is now used by default
• Added prototype of Basic Management and Security Interface (BMSI) using a light-weight TPM multiplexer (lyon)
• Added support for Live migration of L4Linux instances (lxMir)

06/07/2007 - June snapshot released! For a complete list of changes, have a look at the Changelog within the source tarball.

• New Device Driver Environment in L4Env, with support for Linux 2.6 drivers.
• All architectures use now the same ABI:
• Changed size l4_threadid_t from 64bit to 32bit.
• Changed format of l4_timeout_t.
• Improved interrupt handling
• Low-level interrupt handling done in the kernel.
• Removed PIC programming from omega0 and l4io.
• Improved UTCB support in Fiasco.
• Memory resource limits added to Fiasco.
• Added support for I/O port flexpages.
• DICE upgrade to release version 3.1.2.
• L4Linux upgrade to 2.6.21.
• The whole snapshot can be compiled with GCC 4.x.
• Various bugfixes and documentation updates.

28/02/2007 - February snapshot released! For a complete list of changes, have a look at the Changelog within the source tarball.

• L4 build environment is newly arranged.
• DICE upgrade to new release version 3.1.1.
• Fiasco supports the transfer of the FPU within UTCB IPC.
• L4Linux upgrade to 2.6.19.
• Supports a new commandline parameter to configure ISA DMA memory size.
• Uses the omega0 protocol for interrupt allocation by default.
• Ipcmon supports revocation of access rights.
• Various bugfixes and documentation updates.

05/12/2006 - Third patch for October snapshot available. Updated tarballs and a new version of the demo disk image can be downloaded from the download section. The patch is rather large this time, as it includes a major upgrade of DICE. For information on how to apply the patch to a source tree on your harddisk, please see the instructions file.

• Major upgrade of DICE to new release version 3.1.0
• Adaptations in various packages due to changes in DICE
• Various bugfixes
• Various documentation fixes

Attention: Due to the new DICE version, this patch is not binary compatible, so you need to rebuilt the snapshot. It might also be necessary to modify your own IDL files. Please see the complete Changelog for a list of all changes; more relevant documentation can be found in DICE' own Changelog file and Section 1.6.4 of the DICE user manual.

20/11/2006 - New patches for October snapshot available. Updated tarballs and a new version of the demo disk image have been uploaded (patchlevel 2). They fix DICE-related problems in the names and loader packages. For more information please see instructions.

• Fixes for names and loader: Add missing CORBA_alloc() and CORBA_free() implementations

27/10/2006 - Patch for October snapshot available. Updated tarballs and a new version of the demo disk image have also been uploaded. If you want to apply the patch to a previously downloaded version of the snapshot, please read the instructions.

• Fix for Fiasco: Clear reference to previosly freed I/O page table entries
• Fix for Fiasco: Enable 4K stacks in order to avoid stack underflows

16/10/2006 - October snapshot with IPC-Mon support released!

• Fiasco
• Mapping database supports memory, I/O, and capability spaces
• Support for mapping and unmapping task capabilities
• Improved support for mapping and unmapping of superpages
• Support for unmapping memory-mapped I/O pages and I/O flexpages
• Support for querying dirty and accessed flags
• Support for "directed unmap"
• Support for reclaiming unused kernel memory from slab allocaters
• Task capabilities (IPC-Mon) support in user-level packages
• ipcmon package provides a capability-fault handler and client library
• roottask, simple_ts, and loader packages and system-call bindings adapted for task capabilities
• Upgrade to L4linux 2.6.18
• Upgrade to new version of DICE
• Documented snapshot of major components from the main development path

13/07/2006 - It is now possible to run multiple instances of the ORe network switch. Patches for ORe and L4Linux are available here.

30/06/2006 - July snapshot released!

• Fast IPC path in Fiasco
• Sigma0 extension for MTRR support (cacheable memory-mapped I/O)
• Upgrade to L4linux 2.6.17
• L4Env build directories support
• DICE messagebuffer changed to support X.2
• Dynamic loading of applications via ldso
• Development overview document added
• Documented snapshot of major components from the main development path

09/06/2006 - First patch to the snapshot available.

16/05/2006 - Document describing the L4env-core interface available.

07/04/2006 - OSLO - the Open Secure Loader v0.3 relased.

31/03/2006 - First snapshot released!

• initial tarball for the OpenTC project
• components: Fiasco, L4Env core, L4Linux, DICE
• documented snapshot of major components from the main development path