From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1759854AbdAKLhR (ORCPT ); Wed, 11 Jan 2017 06:37:17 -0500 Received: from mga14.intel.com ([192.55.52.115]:11809 "EHLO mga14.intel.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1753671AbdAKLhQ (ORCPT ); Wed, 11 Jan 2017 06:37:16 -0500 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.33,345,1477983600"; d="scan'208";a="807601194" Date: Wed, 11 Jan 2017 13:36:58 +0200 From: Jarkko Sakkinen To: Ken Goldman Cc: linux-security-module@vger.kernel.org, linux-kernel@vger.kernel.org, tpmdd-devel@lists.sourceforge.net Subject: Re: [tpmdd-devel] [PATCH RFC 0/4] RFC: in-kernel resource manager Message-ID: <20170111113658.u5tmmjbuqrxfgpol@intel.com> References: <201701041612.v04GCfPK031525@wind.enjellic.com> <20170109231635.6wh25qoy7svcnys6@intel.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: Organization: Intel Finland Oy - BIC 0357606-4 - Westendinkatu 7, 02160 Espoo User-Agent: Mutt/1.6.2-neo (2016-08-21) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Tue, Jan 10, 2017 at 02:29:08PM -0500, Ken Goldman wrote: > On 1/9/2017 6:16 PM, Jarkko Sakkinen wrote: > > > > Here's my cuts for the kernel: > > > > - Kernel virtualizes handle areas. It's mechanical. > > - Kernel does not virtualize bodies. It's not mechanical. > > - At least the first version of the RM will not do other than session > > isolation for sessions. > > Is it correct that "bodies" are the parameter area of the commands and > responses? > > if so, eventually something should virtualize getcapability. It may be > safer in user space, but it can mask RM issues. body == command / response - (header + handle area) /Jarkko