From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1751257AbdA3AzZ (ORCPT ); Sun, 29 Jan 2017 19:55:25 -0500 Received: from bedivere.hansenpartnership.com ([66.63.167.143]:54964 "EHLO bedivere.hansenpartnership.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751020AbdA3AzR (ORCPT ); Sun, 29 Jan 2017 19:55:17 -0500 Message-ID: <1485737714.2491.13.camel@HansenPartnership.com> Subject: Re: [tpmdd-devel] [PATCH v2 1/2] tpm2: add session handle context saving and restoring to the space code From: James Bottomley To: Ken Goldman , tpmdd-devel@lists.sourceforge.net Cc: linux-security-module@vger.kernel.org, linux-kernel@vger.kernel.org Date: Sun, 29 Jan 2017 16:55:14 -0800 In-Reply-To: References: <1485563481.3229.39.camel@HansenPartnership.com> <1485563558.3229.41.camel@HansenPartnership.com> Content-Type: text/plain; charset="UTF-8" X-Mailer: Evolution 3.16.5 Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Sun, 2017-01-29 at 19:35 -0500, Ken Goldman wrote: > On 1/27/2017 7:32 PM, James Bottomley wrote: > > > > Sessions are also isolated during each instance of a tpm space. > > This means that spaces shouldn't be able to see each other's > > sessions and is enforced by ensuring that a space user may only > > refer to sessions handles that are present in their own chip > > ->session_tbl. Finally when a space is closed, all the sessions > > belonging to it should be flushed so the handles may be re-used by > > other spaces. > > This should be true for transient objects as well. It is ... it's just this patch only covers sessions. James