lkml.org 
[lkml]   [2008]   [Dec]   [3]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: [PATCH 0/4] integrity
On Fri, 14 Nov 2008, Andrew Morton wrote:

> One thing which I cannot say, and which is quite important: how useful
> will all of this be to our users? Are people asking for it?

Apparently, some government users are, and there's a DoD decree which
requires new equipment to include TPM hardware where possible:

http://iase.disa.mil/policy-guidance/dod-dar-tpm-decree07-03-07.pdf

This is to support encryption of data at rest, and for "device
authentication" (requiring remote attestation of system integrity).

It's not clear to me yet how compelling this will be for general-case
users.

> Are
> people likely to enable and use it? Are they even likely to understand
> it? ;) Are any large/important customers asking for it? Are distros
> likely to enable and support it?

I believe that TPM is in "tech preview" in RHEL 5.2, and that there is a
desire to integrate it more fully with the OS via TCG software such as
Trousers: http://trousers.sourceforge.net/



- James
--
James Morris
<jmorris@namei.org>


\
 
 \ /
  Last update: 2008-12-04 00:33    [W:2.802 / U:0.000 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site