lkml.org 
[lkml]   [2017]   [Jan]   [10]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
SubjectRe: [PATCH RFC 0/4] RFC: in-kernel resource manager
Date
On 1/5/2017 2:20 PM, Jason Gunthorpe wrote:
>
> I'd rather give up features (eg policy sessions, if necessary) for the
> unpriv fd than give up security of the unpriv fd.

Please don't give up policy. Nearly every use case of that we think of
for TPM 2.0 uses policy sessions.

E.g.,

In 1.2, PCR authorization was built in to the object. In 2.0, it's a
policy.

In 1.2, key types were restricted to certain commands. In 2.0, it's a
policy.

Then there are all the new use cases - time restricted keys, use count
restricted keys, keys with a PIN, etc., all use policy.

Even use of the EK primary key requires a policy, and that's needed for
salt (getting the first password in securely) and attestation (proof
that the TPM is authentic).


\
 
 \ /
  Last update: 2017-01-10 20:12    [W:0.137 / U:0.284 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site