From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1754805AbdEDJTS (ORCPT ); Thu, 4 May 2017 05:19:18 -0400 Received: from mga07.intel.com ([134.134.136.100]:22330 "EHLO mga07.intel.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S932436AbdEDJSm (ORCPT ); Thu, 4 May 2017 05:18:42 -0400 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.38,287,1491289200"; d="scan'208";a="97500836" Date: Thu, 4 May 2017 12:18:27 +0300 From: Jarkko Sakkinen To: Stefan Berger Cc: tpmdd-devel@lists.sourceforge.net, linux-security-module@vger.kernel.org, jgunthorpe@obsidianresearch.com, linux-kernel@vger.kernel.org Subject: Re: [PATCH v2 0/3] Extend the vTPM proxy driver to pass locality to emulator Message-ID: <20170504091827.6yzmttjf2kxeen4l@intel.com> References: <1493384538-27883-1-git-send-email-stefanb@linux.vnet.ibm.com> <20170503223849.qcoc6xqncbyi6jwj@intel.com> <72bacff5-5213-b114-ebf4-6e3fe7284bdc@linux.vnet.ibm.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <72bacff5-5213-b114-ebf4-6e3fe7284bdc@linux.vnet.ibm.com> Organization: Intel Finland Oy - BIC 0357606-4 - Westendinkatu 7, 02160 Espoo User-Agent: NeoMutt/20170113 (1.7.2) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Wed, May 03, 2017 at 07:42:06PM -0400, Stefan Berger wrote: > On 05/03/2017 06:38 PM, Jarkko Sakkinen wrote: > > On Fri, Apr 28, 2017 at 09:02:15AM -0400, Stefan Berger wrote: > > > The purpose of this series of patches is to enable the passing of the locality > > > a command is executing in to a TPM emulator. To enable this we introduce a new > > > flag for the device creation ioctl that requests that the locality be prepended > > > to every command. For applications to check which flags the driver supports, we > > > add a new ioctl that returns a bitmask of supported flags. > > This is a weird change proposal as you could use tpm_vtpm_proxy for > > other than some TPM emulator. > > I think in most cases the recipient of the TPM commands from the vtpm_proxy > driver will be a TPM emulator. What do you have in mind? Like using Intel SGX to implement TPM in ring-3. I've thought vtpm_tpm_proxy as generic proxy that you can also use for emulators. /Jarkko