nsacyber / HIRS

Trusted Computing based services supporting TPM provisioning and supply chain validation concepts. #nsacyber
Other
180 stars 57 forks source link

Event processing when no access to vendor-table.json #768

Closed iadgovuser58 closed 4 months ago

iadgovuser58 commented 6 months ago

When eventlog tool is run as user (such as in a command prompt without sudo, or in an IDE which is run as the user), the vendor-table.json file is not accessible, and so valid GUID lookups return "unknown GUID reference". In some cases the code needs this GUID reference to determine the next piece of code that executes. If the GUID is valid but the code thinks it is invalid, it will not process the next chunk of data properly.

Changes needed:

Part 1:

Part 2:

Note for testing purposes: Typical file permissions for the path to vendor