lkml.org 
[lkml]   [2009]   [Jun]   [19]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: [RFC v4][PATCH 2/2] intel_txt: Intel(R) TXT and tboot kernel support
* Pavel Machek (pavel@ucw.cz) wrote:
> What are non-evil uses of this code?

The most common use case I've heard requested from real live
customers[1] is...you guessed it...trusted boot.

This is typically in the context of virtualization and data centers or
clouds. The concerns being addressed are:

* confidence that the hardware is running the VMM that the hardware
owner configured it w/, since they are on the hook for providing a
safe service for each VM running on that hardware

* flip side of that is an additional layer protecting against malicious
VM that is using some VMM hole to try and subvert the host w/ a VMM
of their own

thanks,
-chris
--

[1] as opposed to hardware vendors pushing a feature


\
 
 \ /
  Last update: 2009-06-19 20:39    [W:0.189 / U:0.104 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site