Re: [RFC PATCH 0/4] Multi-instance vTPM driver

[Jason Gunthorpe <jgunthorpe-ePGOBjL8dl3ta4EC/59zMFaTQe2KTcn/@public.gmane.org>]

On Tue, Jan 19, 2016 at 01:18:08PM -0500, Stefan Berger wrote:
>    Jason Gunthorpe <jgunthorpe-ePGOBjL8dl3ta4EC/59zMFaTQe2KTcn/@public.gmane.org> wrote on 01/19/2016
>    01:08:02 PM:
>    >
>    > On Tue, Jan 19, 2016 at 12:53:40PM -0500, Stefan Berger wrote:
>    > >    This series has absolutely nothing to do with resource
>    > >    management.
>    >
>    > Sure the patch doesn't, but the proposed application does.
>    >
>    > Linux namespaces is all about resource management.
>    The resource manager that's been discussed on the list is something
>    different, though, right?

No, I meant that discussion.

A completed TPM resource manager would be very close to supporting a
'tpm namespace'.

Ie per-ns virtualizing of the SRK with would be trivial.

Access control would already be done out of the box as a consequence
of the process-to-process isolation the resource manager would need to
perform.

Not sure about PCRS, I guess that depends on how that could work. Not
sure it makes alot of sense in TPM 1.2 at least...

Jason

------------------------------------------------------------------------------
Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=267308311&iu=/4140