Native Mac Support for Chipsec?

Native Mac Support for Chipsec?

[Darren Bilby]

[-- Attachment #1: Type: text/plain, Size: 786 bytes --]

Just wondering if there is any intention to officially support OSX with
Chipsec. Getting it running from a bootable USB drive on a Mac is pretty
simple (e.g. https://sevenbits.github.io/Mac-Linux-USB-Loader + git clone)
, but would be great to be able to have the option to run it natively.

I'm guessing the driver is the key issue? There is some basic raw
read/write support implemented in the Pmem memory forensics driver which
might be a reasonable start, and I have support from the Rekall team for
adding the right primitives there if it was considered a reasonable path:
https://github.com/google/rekall/tree/master/tools/osx/MacPmem

Is the key factor in support just time/contributions? or are there factors
to consider before considering this?

Thanks, Darren.

[-- Attachment #2: attachment.html --]
[-- Type: text/html, Size: 1351 bytes --]

Re: Native Mac Support for Chipsec?

[Blibbet]

[-- Attachment #1: Type: text/plain, Size: 1008 bytes --]

On 07/27/2015 01:56 AM, Darren Bilby wrote:
> Just wondering if there is any intention to officially support OSX with
> Chipsec.
...
> Is the key factor in support just time/contributions? or are there factors
> to consider before considering this?

Yes, OS X support for CHIPSEC would be nice.

I've asked the CHIPSEC team this question before, I think the only issue
is lack of dev resources on the port. The good news is that once someone
an OSX kernel driver stub, you can copy the same Intel assembly in the
Windows and Linux drivers.

I'd be nice if Apple stepped up and helped with their platforms'
security by contributing the port and this driver. Otherwise, they'll
have to keep relying on Linux to secure their systems. :-) Ditto
Goggle/OHA for Android, and FreeBSD Foundation/iX Systems for FreeBSD...

BTW, at a class last weekend one one student successfully ran LUV-live's
CHIPSEC on a Mac system (macboo) as well.

Thanks,
Lee
RSS: http://firmwaresecurity.com/feed

Re: Native Mac Support for Chipsec?

[Loucaides, John]

[-- Attachment #1: Type: text/plain, Size: 1111 bytes --]


> On 07/27/2015 01:56 AM, Darren Bilby wrote:
> > Just wondering if there is any intention to officially support OSX
> > with Chipsec.

We (the Intel team) haven't been spending time on a Mac OS port. It could be
done, though. As you said, chipsec should work on a mac by booting off of a
USB stick.

> > Is the key factor in support just time/contributions? or are there
> > factors to consider before considering this?
> 
> Yes, OS X support for CHIPSEC would be nice.
> 
> I've asked the CHIPSEC team this question before, I think the only
> issue is lack of dev resources on the port. The good news is that once
> someone an OSX kernel driver stub, you can copy the same Intel assembly
> in the Windows and Linux drivers.

Yes. It's really just a time commitment thing. One other consideration, if
you wanted to create a driver, is that chipsec is licensed under GPLv2, so
if you build off of something else, you should be sure that it is compatible
with GPL. 

Let us know if you come up with something! It'd be very exciting to see such
contributions. :-)

Thanks,
 - John


[-- Attachment #2: smime.p7s --]
[-- Type: application/pkcs7-signature, Size: 6662 bytes --]