| Date | Wed, 13 Aug 2008 11:21:03 -0700 | From | "H. Peter Anvin" <> | Subject | Re: TALPA - a threat model? well sorta. |
| |
Andi Kleen wrote: > > This means you need significant LSM components simply to protect > the integrity of the file scanner against root. It's even > unclear it's possible in the general case (e.g. X server doing > arbitary DMA and no IOMMU -- how do you protect the file scanner?) >
Without Treacherous Computing, it isn't possible, even in kernel space.
In Treacherous Computing you can put it in the hypervisor, which of course just means the hypervisor is now much bigger and likely to contain security holes.
-hpa
|