lkml.org 
[lkml]   [2016]   [Mar]   [16]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: [PATCH v8 08/10] tpm: Proxy driver for supporting multiple emulated TPMs
On Wed, Mar 16, 2016 at 11:49:04AM -0600, Jason Gunthorpe wrote:
> On Wed, Mar 16, 2016 at 02:09:16PM +0200, Jarkko Sakkinen wrote:
> > On Sun, Mar 13, 2016 at 06:54:38PM -0400, Stefan Berger wrote:
>
> > Alternative to this would be to have /dev/vtpmx create:
> >
> > * /dev/vtpm0 for the server
> > * /dev/tpm0 for the client
> >
> > This is how David Howell's PoC worked and that's why I want
> > to make this alternative visible.
> >
> > The server could even respawn without container noticing it.
> > This solution have better availability properties.
>
> Seriously, no, that doesn't make any sense. TPM is stateful, you can't
> respawn the server side.
>
> If anyone is ever clever enough to make that workable then they just
> go ahead and save the server fd with the other state. systemd for
> instance already has everything needed to make that work.
>
> We don't need to have a server dev node and we certainly don't need
> the leaking problem that leaves us with.

Fair enough.

> Jason

/Jarkko

\
 
 \ /
  Last update: 2016-03-16 22:01    [W:0.130 / U:0.156 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site