What's Changed
Additions
- Log TCB advisories if status is not UpToDate by @thomasten in #729
- Allow specifying accepted avisories for
SWHardeningNeeded
TCB status by @daniel-weisse in #733 - Let Coordinator serve monotonic counters to Marbles by @thomasten in #741
- Derive marble private secrets using marble type in addition to UUID by @daniel-weisse in #730
- Previously, secrets were only derived based on a Marble's UUID, which would provide two different Marbles reporting the same UUID with the same secret. This release enforces two different Marbles will always receive different secrets, regardless of their UUID. If two Marbles require access to the same secret, the secret should be marked as
Shared
instead. To restore the behavior of MarbleRun previous to v1.6, set theDisableSecretBinding
property of the Marble in the manifest totrue
.
- Previously, secrets were only derived based on a Marble's UUID, which would provide two different Marbles reporting the same UUID with the same secret. This release enforces two different Marbles will always receive different secrets, regardless of their UUID. If two Marbles require access to the same secret, the secret should be marked as
Fixes
- coordinator: fix failing user verification when multiple client certs are provided by @thomasten in #738
Misc
- Change license from MPL-2.0 to BUSL-1.1 by @thomasten in #752
Full Changelog: v1.5.2...v1.6.0