From mboxrd@z Thu Jan 1 00:00:00 1970 From: Jason Gunthorpe Subject: Re: [RFC PATCH 0/4] Multi-instance vTPM driver Date: Tue, 19 Jan 2016 16:04:56 -0700 Message-ID: <20160119230456.GB31745@obsidianresearch.com> References: <1452787318-29610-1-git-send-email-stefanb@us.ibm.com> <20160119174400.GA7616@obsidianresearch.com> <201601191753.u0JHrku2031608@d01av01.pok.ibm.com> <20160119180802.GA8038@obsidianresearch.com> <201601191818.u0JIIExQ010843@d03av04.boulder.ibm.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Return-path: Content-Disposition: inline In-Reply-To: <201601191818.u0JIIExQ010843-2xHzGjyANq4+UXBhvPuGgqsjOiXwFzmk@public.gmane.org> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: tpmdd-devel-bounces-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org To: Stefan Berger Cc: dhowells-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org, Stefan Berger , tpmdd-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org, dwmw2-wEGCiKHe2LqWVfeAwA7xHQ@public.gmane.org List-Id: tpmdd-devel@lists.sourceforge.net On Tue, Jan 19, 2016 at 01:18:08PM -0500, Stefan Berger wrote: > Jason Gunthorpe wrote on 01/19/2016 > 01:08:02 PM: > > > > On Tue, Jan 19, 2016 at 12:53:40PM -0500, Stefan Berger wrote: > > > This series has absolutely nothing to do with resource > > > management. > > > > Sure the patch doesn't, but the proposed application does. > > > > Linux namespaces is all about resource management. > The resource manager that's been discussed on the list is something > different, though, right? No, I meant that discussion. A completed TPM resource manager would be very close to supporting a 'tpm namespace'. Ie per-ns virtualizing of the SRK with would be trivial. Access control would already be done out of the box as a consequence of the process-to-process isolation the resource manager would need to perform. Not sure about PCRS, I guess that depends on how that could work. Not sure it makes alot of sense in TPM 1.2 at least... Jason ------------------------------------------------------------------------------ Site24x7 APM Insight: Get Deep Visibility into Application Performance APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month Monitor end-to-end web transactions and take corrective actions now Troubleshoot faster and improve end-user experience. Signup Now! http://pubads.g.doubleclick.net/gampad/clk?id=267308311&iu=/4140