lkml.org 
[lkml]   [2008]   [Aug]   [15]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    SubjectRe: [PATCH 1/4] integrity: TPM internel kernel interface
    From
    Date
    On Fri, 15 Aug 2008 14:50:01 EDT, Kenneth Goldman said:
    > "Peter Dolding" <oiaohm@gmail.com> wrote on 08/15/2008 06:37:27 AM:
    >
    > > Remember even soldered on stuff can fail. How linux handles the
    > > death of the TPM module needs to be covered.
    >
    > Is fault tolerance a requirement just for the TPM, or is it a general>
    > Linux requirement? Has it always been there, or is it new?
    >
    > For example, does kernel software have to gracefully handle
    > failures in the disk controller, processor, memory controller, BIOS
    > flash memory, etc?

    Well, on a dual/quad core/socket/whatever system, a failing processor
    can be downed and the system keep going. On a NUMA box, you can yank a
    node with a bad memory controller after you take it down. Similarly for
    a disk controller if you have more than one, and the failed one isn't
    critical for system operation.

    And the TPM chip is more like a USB controller, in that there's a *high*
    degree of probability that the system will still be able to run even if it
    fails or goes insane (consider that on my laptop, the TPM driver was broken
    for a while, and I was still ableto work). So you need to write code to
    do things like detect TPM downage or insanity, decide what to do on the
    kernel level, what to reflect up to any security modules running in
    userspace, etc....
    [unhandled content-type:application/pgp-signature]
    \
     
     \ /
      Last update: 2008-08-15 21:33    [W:3.758 / U:0.004 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site