Re: [PATCH 0/7] Integrity Service and SLIM
- From: David Safford <safford@xxxxxxxxxxxxxx>
- Date: Tue, 26 Sep 2006 11:53:59 -0400
On Tue, 2006-09-19 at 21:02 +0200, Pavel Machek wrote:
On Thu 2006-09-14 16:51:13, Andrew Morton wrote:
Having carefully reviewed your code I have come to the firm conclusion that
it is written in C. The next step is to put it all in -mm and see if
anyone shouts at me.
Hmmm, "it is written in C" does not seem like good enough reason to
merge it... right?
He did go on to say:
I'll need help on the upstream-merge decision.
A convincing statement of interest (or, better, intent) from vendors
ie: the people who will deliver and support this into the target
users) would help a lot. Where do we stand with that?
which makes it clear that we also have to show value, interest, and
support. (And, yes, we are working on showing that...)
I tried to understand what it is good for, but it seems that in
current state it is not much good for anything.
Part of the problem is that this patch set is just one small part
of the overall architecture, which includes an additional kernel
module to implement the integrity service used by SLIM, and user
space libraries and tools to implement/manage the trusted boot,
integrity mandatory access control, and secure authentication features.
We were asked to submit this in small pieces to make the review easier,
and what you see so far is just the first piece, with the others
coming shortly.
We deeply appreciate all the review and comments that happened
along the path of getting into -mm. It has made the code much better,
and makes it easier to work with our partners to start to show long
term interest and support.
Will IBM work at splitting ssh so that trusted/untrusted portions are
separated?
The trousers project at sourceforge already has provided TPM support
for openSSL, and ssh uses the openSSL crypto library - I'm not sure
if this directly translates to TPM support for ssh, but that's
certainly something we want to enable, and I'll check into it.
dave
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/
- References:
- [PATCH 0/7] Integrity Service and SLIM
- From: Kylene Jo Hall
- Re: [PATCH 0/7] Integrity Service and SLIM
- From: Andrew Morton
- Re: [PATCH 0/7] Integrity Service and SLIM
- From: Pavel Machek
- [PATCH 0/7] Integrity Service and SLIM
- Prev by Date: Re: [PATCH][RFC] Rearranging files to improve disk performanc
- Next by Date: [Patch] SCSI I/O statistics
- Previous by thread: Re: [PATCH 0/7] Integrity Service and SLIM
- Next by thread: [PATCH 5/7] SLIM: make and config stuff
- Index(es):
Relevant Pages
|
Loading
