lkml.org 
[lkml]   [2014]   [Feb]   [26]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    From
    SubjectTrusted kernel patchset for Secure Boot lockdown
    Date
    The conclusion we came to at Plumbers was that this patchset was basically
    fine but that Linus hated the name "securelevel" more than I hate pickled
    herring, so after thinking about this for a few months I've come up with
    "Trusted Kernel". This flag indicates that the kernel is, via some
    external mechanism, trusted and should behave that way. If firmware has
    some way to verify the kernel, it can pass that information on. If userspace
    has some way to verify the kernel, it can set the flag itself. However,
    userspace should not attempt to use the flag as a means to verify that the
    kernel was trusted - untrusted userspace could have set it on an untrusted
    kernel, but by the same metric an untrusted kernel could just set it itself.

    If people object to this name then I swear to god that I will open a poll
    on Phoronix to decide the next attempt and you will like that even less.



    \
     
     \ /
      Last update: 2014-02-26 23:41    [W:4.218 / U:0.268 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site