From: Stefan Berger <stefanb@linux.vnet.ibm.com>
To: Eric Blake <eblake@redhat.com>
Cc: mst@redhat.com, qemu-devel@nongnu.org, anthony@codemonkey.ws,
andreas.niederl@iaik.tugraz.at
Subject: Re: [Qemu-devel] [PATCH V20 8/8] Add fd parameter for TPM passthrough driver
Date: Sat, 19 Jan 2013 13:37:13 -0500 [thread overview]
Message-ID: <50FAE7D9.7090309@linux.vnet.ibm.com> (raw)
In-Reply-To: <50FABC50.6090507@redhat.com>
On 01/19/2013 10:31 AM, Eric Blake wrote:
> On 01/18/2013 05:55 PM, Stefan Berger wrote:
>> On 01/18/2013 07:14 PM, Stefan Berger wrote:
>>> On 01/18/2013 01:18 PM, Eric Blake wrote:
>>>> On 01/18/2013 09:02 AM, Stefan Berger wrote:
>>> When libvirt forks, the child process inherits the file descriptors,
>>> among them those of the taps and /dev/tpm0. The subsequent execve
>>> keeps the file descriptor open. QEMU then reads the TPM file
>>> descriptor from the command line into above TPMInfo->fd. This also
>>> works with 'exec 100<>/dev/tpm0' via command line.
>>> Similar to the SELinux labeling of all the other file descriptors I
>>> also use the one for the TPM device for SELinux labeling.
>>>
>> I have to correct this: The libvirt patches for this use path= on the
>> command line and also apply the SELinux label on the path rather than
>> the fd. So, this patch then adds file descriptor passing support to have
>> equivalent functionality to other devices.
> You _still_ don't need extra handling for fd passing; neither on the
> command line, nor in QMP. Remember, we added --add-fd to the command
> line, precisely so we could use:
>
> qemu -add-fd set=1,fd=100 -tpmdev passthrough,path=/dev/fdset/1 \
> 100<>/dev/tpm0
This helps. /dev/fdset/1 is just a string and not a real device
following what I see in the code. Then the problem seems to be solved by
replacing open() with qemu_open() and we can drop this patch. Thanks for
the hint. Obviously I don't follow all the developments in QEMU close
enough...
Regards,
Stefan
prev parent reply other threads:[~2013-01-19 18:37 UTC|newest]
Thread overview: 21+ messages / expand[flat|nested] mbox.gz Atom feed top
2013-01-18 16:02 [Qemu-devel] [PATCH V20 0/8] Qemu Trusted Platform Module (TPM) integration Stefan Berger
2013-01-18 16:02 ` [Qemu-devel] [PATCH V20 1/8] Support for TPM command line options Stefan Berger
2013-02-01 15:33 ` Corey Bryant
2013-01-18 16:02 ` [Qemu-devel] [PATCH V20 2/8] Add TPM (frontend) hardware interface (TPM TIS) to QEMU Stefan Berger
2013-02-01 17:02 ` Corey Bryant
2013-01-18 16:02 ` [Qemu-devel] [PATCH V20 3/8] Add a debug register Stefan Berger
2013-02-01 17:07 ` Corey Bryant
2013-01-18 16:02 ` [Qemu-devel] [PATCH V20 4/8] Build the TPM frontend code Stefan Berger
2013-02-01 17:08 ` Corey Bryant
2013-01-18 16:02 ` [Qemu-devel] [PATCH V20 5/8] Add a TPM Passthrough backend driver implementation Stefan Berger
2013-01-19 9:18 ` Blue Swirl
2013-01-19 14:29 ` Stefan Berger
2013-02-01 19:03 ` Corey Bryant
2013-01-18 16:02 ` [Qemu-devel] [PATCH V20 6/8] Add support for cancelling of a TPM command Stefan Berger
2013-01-18 16:02 ` [Qemu-devel] [PATCH V20 7/8] Introduce --enable-tpm-passthrough configure option Stefan Berger
2013-02-01 19:21 ` Corey Bryant
2013-01-18 16:02 ` [Qemu-devel] [PATCH V20 8/8] Add fd parameter for TPM passthrough driver Stefan Berger
[not found] ` <50F991FE.3000901@redhat.com>
2013-01-19 0:14 ` Stefan Berger
2013-01-19 0:55 ` Stefan Berger
2013-01-19 15:31 ` Eric Blake
2013-01-19 18:37 ` Stefan Berger [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=50FAE7D9.7090309@linux.vnet.ibm.com \
--to=stefanb@linux.vnet.ibm.com \
--cc=andreas.niederl@iaik.tugraz.at \
--cc=anthony@codemonkey.ws \
--cc=eblake@redhat.com \
--cc=mst@redhat.com \
--cc=qemu-devel@nongnu.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).