[lkml]   [2014]   [Mar]   [19]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: Trusted kernel patchset for Secure Boot lockdown
* One Thousand Gnomes:

>> For the Chrome OS use-case, it might be better described as "untrusted
>> userspace", but that seems unfriendly. :) The "trusted kernel" name
>> seems fine to me.
> Trusted is rather misleading. It's not trusted, it's *measured*.

I don't think anyone is doing any measurement. In particular, the
kernel does not know anything about the history of the boot process
and cannot provide any form of attestation. This is why this feature
is not very useful to end users.

 \ /
  Last update: 2014-03-19 19:21    [W:0.238 / U:28.008 seconds]
©2003-2018 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site