qemu-devel.nongnu.org archive mirror
 help / color / mirror / Atom feed
From: Stefan Berger <stefanb@linux.vnet.ibm.com>
To: Eric Blake <eblake@redhat.com>
Cc: mst@redhat.com, qemu-devel@nongnu.org, anthony@codemonkey.ws,
	andreas.niederl@iaik.tugraz.at
Subject: Re: [Qemu-devel] [PATCH V20 8/8] Add fd parameter for TPM passthrough driver
Date: Sat, 19 Jan 2013 13:37:13 -0500	[thread overview]
Message-ID: <50FAE7D9.7090309@linux.vnet.ibm.com> (raw)
In-Reply-To: <50FABC50.6090507@redhat.com>

On 01/19/2013 10:31 AM, Eric Blake wrote:
> On 01/18/2013 05:55 PM, Stefan Berger wrote:
>> On 01/18/2013 07:14 PM, Stefan Berger wrote:
>>> On 01/18/2013 01:18 PM, Eric Blake wrote:
>>>> On 01/18/2013 09:02 AM, Stefan Berger wrote:
>>> When libvirt forks, the child process inherits the file descriptors,
>>> among them those of the taps and /dev/tpm0. The subsequent execve
>>> keeps the file descriptor open. QEMU then reads the TPM file
>>> descriptor from the command line into above TPMInfo->fd. This also
>>> works with 'exec 100<>/dev/tpm0' via command line.
>>> Similar to the SELinux labeling of all the other file descriptors I
>>> also use the one for the TPM device for SELinux labeling.
>>>
>> I have to correct this: The libvirt patches for this use path= on the
>> command line and also apply the SELinux label on the path rather than
>> the fd. So, this patch then adds file descriptor passing support to have
>> equivalent functionality to other devices.
> You _still_ don't need extra handling for fd passing; neither on the
> command line, nor in QMP.  Remember, we added --add-fd to the command
> line, precisely so we could use:
>
> qemu -add-fd set=1,fd=100 -tpmdev passthrough,path=/dev/fdset/1 \
>    100<>/dev/tpm0
This helps. /dev/fdset/1 is just a string and not a real device 
following what I see in the code. Then the problem seems to be solved by 
replacing open() with qemu_open() and we can drop this patch. Thanks for 
the hint. Obviously I don't follow all the developments in QEMU close 
enough...

Regards,
     Stefan

      reply	other threads:[~2013-01-19 18:37 UTC|newest]

Thread overview: 21+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2013-01-18 16:02 [Qemu-devel] [PATCH V20 0/8] Qemu Trusted Platform Module (TPM) integration Stefan Berger
2013-01-18 16:02 ` [Qemu-devel] [PATCH V20 1/8] Support for TPM command line options Stefan Berger
2013-02-01 15:33   ` Corey Bryant
2013-01-18 16:02 ` [Qemu-devel] [PATCH V20 2/8] Add TPM (frontend) hardware interface (TPM TIS) to QEMU Stefan Berger
2013-02-01 17:02   ` Corey Bryant
2013-01-18 16:02 ` [Qemu-devel] [PATCH V20 3/8] Add a debug register Stefan Berger
2013-02-01 17:07   ` Corey Bryant
2013-01-18 16:02 ` [Qemu-devel] [PATCH V20 4/8] Build the TPM frontend code Stefan Berger
2013-02-01 17:08   ` Corey Bryant
2013-01-18 16:02 ` [Qemu-devel] [PATCH V20 5/8] Add a TPM Passthrough backend driver implementation Stefan Berger
2013-01-19  9:18   ` Blue Swirl
2013-01-19 14:29     ` Stefan Berger
2013-02-01 19:03   ` Corey Bryant
2013-01-18 16:02 ` [Qemu-devel] [PATCH V20 6/8] Add support for cancelling of a TPM command Stefan Berger
2013-01-18 16:02 ` [Qemu-devel] [PATCH V20 7/8] Introduce --enable-tpm-passthrough configure option Stefan Berger
2013-02-01 19:21   ` Corey Bryant
2013-01-18 16:02 ` [Qemu-devel] [PATCH V20 8/8] Add fd parameter for TPM passthrough driver Stefan Berger
     [not found]   ` <50F991FE.3000901@redhat.com>
2013-01-19  0:14     ` Stefan Berger
2013-01-19  0:55       ` Stefan Berger
2013-01-19 15:31         ` Eric Blake
2013-01-19 18:37           ` Stefan Berger [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=50FAE7D9.7090309@linux.vnet.ibm.com \
    --to=stefanb@linux.vnet.ibm.com \
    --cc=andreas.niederl@iaik.tugraz.at \
    --cc=anthony@codemonkey.ws \
    --cc=eblake@redhat.com \
    --cc=mst@redhat.com \
    --cc=qemu-devel@nongnu.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).