jaredwright / chipsec_integration_tests

Chipsec-based integration tests for the Bareflank Hypervisor project

Chipsec-based integration tests for the Bareflank Hypervisor

This repository contains a Bareflank extension that aims to prove-out the concept of using chipsec as an integration testing tool for Bareflank-based VMMs.

The chipsec_modules directory contains python modules for the Chipsec framework. Each module represents one integration test that verifies a specific behaviour of a loaded VMM.

The chipsec_vmms directory contains small VMM implementations to be tested with the chipsec modules.

WARNING

Do not build or run this extension on a production environment! Chipsec is intended to be a testing tool that intentionally opens massive security holes in your platform to perform invasive testing.

Usage

This extension requires CMake version > 3.12, Python 2.7, and some chipsec-specific dependencies:

apt-get install build-essential python-dev python-setuptools python gcc
apt-get install linux-headers-$(uname -r) nasm

To build and run:

git clone --recursive https://github.com/JaredWright/chipsec_integration_tests
mkdir build; cd build
cmake ../chipsec_integration_tests/hypervisor -DCONFIG=<full/path/to/this/repo>/config.cmake
make -j<#-of-cores>
make chipsec_test

chipsec_integration_tests's Issues

chipsec integration

I plan to make a change to chipsec_main functionality which will allow you to pass arguments through to all modules (opposed to only an individually called module). Pull Request.

I can make a pull request here to when it's merged into chipsec.

The changes should simplify the main.py file located under chipsec_modules/bareflank.

Here is an example of the changes if you use the Pull Request referenced above:

from sys import argv
from os.path import abspath

from chipsec_main import *

margs = ",".join(argv[1:])
this_dir = abspath(os.path.dirname(__file__))

cs = ChipsecMain(["-I", this_dir, "-t", "BAREFLANK", "-a", margs])
cs.main()