Re: [RFC][PATCH 3/3] TXT: Intel(R) TXT and tboot kernel support

[Jeremy Fitzhardinge <jeremy@goop.org>]

Cihula, Joseph wrote:
> --- a/security/Kconfig	Mon Oct 06 12:50:47 2008 -0700
> +++ b/security/Kconfig	Tue Oct 07 00:13:02 2008 -0700
> @@ -115,6 +115,23 @@ config SECURITY_DEFAULT_MMAP_MIN_ADDR
>  	  /proc/sys/vm/mmap_min_addr tunable.
>  
>  
> +config TXT
>   

This should be X86_TXT; perhaps even X86_INTEL_TXT unless someone else 
is likely to implement this stuff.  ("TXT" is awfully generic.)


> +        bool "Enable Intel(R) Trusted Execution Technology (TXT)"
> +        depends on EXPERIMENTAL && X86
> +        help
> +          This option enables support for booting the kernel with
> +          the Trusted Boot (tboot) module. This will utilize
> +          Intel(R) Trusted Execution Technology (TXT) to perform a
> +          measured launch of the kernel. If the system does not
> +          support TXT, this will have no effect.
> +
> +          See <http://www.intel.com/technology/security/> for more
> +          information about Intel(R) TXT.
> +          And see <http://tboot.sourceforge.net> for more information
> +          about tboot.
> +
> +          If you are unsure as to whether this is required, answer N.
> +
>  source security/selinux/Kconfig
>  source security/smack/Kconfig
>   

    J