qemu-devel.nongnu.org archive mirror
 help / color / mirror / Atom feed
From: Eric Blake <eblake@redhat.com>
To: Stefan Berger <stefanb@linux.vnet.ibm.com>
Cc: mst@redhat.com, qemu-devel@nongnu.org, anthony@codemonkey.ws,
	andreas.niederl@iaik.tugraz.at
Subject: Re: [Qemu-devel] [PATCH V20 8/8] Add fd parameter for TPM passthrough driver
Date: Sat, 19 Jan 2013 08:31:28 -0700	[thread overview]
Message-ID: <50FABC50.6090507@redhat.com> (raw)
In-Reply-To: <50F9EEED.5020702@linux.vnet.ibm.com>

[-- Attachment #1: Type: text/plain, Size: 1473 bytes --]

On 01/18/2013 05:55 PM, Stefan Berger wrote:
> On 01/18/2013 07:14 PM, Stefan Berger wrote:
>> On 01/18/2013 01:18 PM, Eric Blake wrote:
>>> On 01/18/2013 09:02 AM, Stefan Berger wrote:
>> When libvirt forks, the child process inherits the file descriptors,
>> among them those of the taps and /dev/tpm0. The subsequent execve
>> keeps the file descriptor open. QEMU then reads the TPM file
>> descriptor from the command line into above TPMInfo->fd. This also
>> works with 'exec 100<>/dev/tpm0' via command line.
>> Similar to the SELinux labeling of all the other file descriptors I
>> also use the one for the TPM device for SELinux labeling.
>>
> I have to correct this: The libvirt patches for this use path= on the
> command line and also apply the SELinux label on the path rather than
> the fd. So, this patch then adds file descriptor passing support to have
> equivalent functionality to other devices.

You _still_ don't need extra handling for fd passing; neither on the
command line, nor in QMP.  Remember, we added --add-fd to the command
line, precisely so we could use:

qemu -add-fd set=1,fd=100 -tpmdev passthrough,path=/dev/fdset/1 \
  100<>/dev/tpm0

See - by making fd passing universally accessible under pathname
processing, we've made it easier to add new commands that don't have to
special-case fd handling.

-- 
Eric Blake   eblake redhat com    +1-919-301-3266
Libvirt virtualization library http://libvirt.org


[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 621 bytes --]

  reply	other threads:[~2013-01-19 15:31 UTC|newest]

Thread overview: 21+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2013-01-18 16:02 [Qemu-devel] [PATCH V20 0/8] Qemu Trusted Platform Module (TPM) integration Stefan Berger
2013-01-18 16:02 ` [Qemu-devel] [PATCH V20 1/8] Support for TPM command line options Stefan Berger
2013-02-01 15:33   ` Corey Bryant
2013-01-18 16:02 ` [Qemu-devel] [PATCH V20 2/8] Add TPM (frontend) hardware interface (TPM TIS) to QEMU Stefan Berger
2013-02-01 17:02   ` Corey Bryant
2013-01-18 16:02 ` [Qemu-devel] [PATCH V20 3/8] Add a debug register Stefan Berger
2013-02-01 17:07   ` Corey Bryant
2013-01-18 16:02 ` [Qemu-devel] [PATCH V20 4/8] Build the TPM frontend code Stefan Berger
2013-02-01 17:08   ` Corey Bryant
2013-01-18 16:02 ` [Qemu-devel] [PATCH V20 5/8] Add a TPM Passthrough backend driver implementation Stefan Berger
2013-01-19  9:18   ` Blue Swirl
2013-01-19 14:29     ` Stefan Berger
2013-02-01 19:03   ` Corey Bryant
2013-01-18 16:02 ` [Qemu-devel] [PATCH V20 6/8] Add support for cancelling of a TPM command Stefan Berger
2013-01-18 16:02 ` [Qemu-devel] [PATCH V20 7/8] Introduce --enable-tpm-passthrough configure option Stefan Berger
2013-02-01 19:21   ` Corey Bryant
2013-01-18 16:02 ` [Qemu-devel] [PATCH V20 8/8] Add fd parameter for TPM passthrough driver Stefan Berger
     [not found]   ` <50F991FE.3000901@redhat.com>
2013-01-19  0:14     ` Stefan Berger
2013-01-19  0:55       ` Stefan Berger
2013-01-19 15:31         ` Eric Blake [this message]
2013-01-19 18:37           ` Stefan Berger

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=50FABC50.6090507@redhat.com \
    --to=eblake@redhat.com \
    --cc=andreas.niederl@iaik.tugraz.at \
    --cc=anthony@codemonkey.ws \
    --cc=mst@redhat.com \
    --cc=qemu-devel@nongnu.org \
    --cc=stefanb@linux.vnet.ibm.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).