From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S933743AbdBVVLA (ORCPT ); Wed, 22 Feb 2017 16:11:00 -0500 Received: from mga09.intel.com ([134.134.136.24]:22565 "EHLO mga09.intel.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1754946AbdBVVKl (ORCPT ); Wed, 22 Feb 2017 16:10:41 -0500 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.35,196,1484035200"; d="scan'208";a="67897155" Date: Wed, 22 Feb 2017 23:08:53 +0200 From: Jarkko Sakkinen To: Nayna Cc: tpmdd-devel@lists.sourceforge.net, dhowells@redhat.com, open list , James.Bottomley@HansenPartnership.com, linux-security-module@vger.kernel.org Subject: Re: [tpmdd-devel] [PATCH v2 4/7] tpm: infrastructure for TPM spaces Message-ID: <20170222210853.lemfh54neoq4d6qw@intel.com> References: <20170216192529.25467-1-jarkko.sakkinen@linux.intel.com> <20170216192529.25467-5-jarkko.sakkinen@linux.intel.com> <58AC85F2.5000406@linux.vnet.ibm.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <58AC85F2.5000406@linux.vnet.ibm.com> Organization: Intel Finland Oy - BIC 0357606-4 - Westendinkatu 7, 02160 Espoo User-Agent: Mutt/1.6.2-neo (2016-08-21) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Tue, Feb 21, 2017 at 11:54:50PM +0530, Nayna wrote: > > > On 02/17/2017 12:55 AM, Jarkko Sakkinen wrote: > > Added an ability to virtualize TPM commands into an isolated context > > that we call a TPM space because the word context is already heavily > > used in the TPM specification. Both the handle areas and bodies (where > > necessary) are virtualized. > > > > The mechanism works by adding a new parameter struct tpm_space to the > > tpm_transmit() function. This new structure contains the list of virtual > > handles and a buffer of page size (currently) for backing storage. > > > > When tpm_transmit() is called with a struct tpm_space instance it will > > execute the following sequence: > > > > 1. Take locks. > > 2. Load transient objects from the backing storage by using ContextLoad > > and map virtual handles to physical handles. > > 3. Perform the transaction. > > 4. Save transient objects to backing storage by using ContextSave and > > map resulting physical handle to virtual handle if there is such. > > > > This commit does not implement virtualization support for hmac and > > policy sessions. > > > > If I have understood discussions correctly, I assume, that kernel TPM > operations will also be routed via RM. And I think that is not happening now > with these patches. > > Am I missing something ? > > Thanks & Regards, > - Nayna Nope. It's not in the scope of this patch set and there are not kernel use cases at the moment that would require it. /Jarkko