Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1755240AbaJGS73 (ORCPT ); Tue, 7 Oct 2014 14:59:29 -0400 Received: from mail-la0-f51.google.com ([209.85.215.51]:39706 "EHLO mail-la0-f51.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1755040AbaJGS70 (ORCPT ); Tue, 7 Oct 2014 14:59:26 -0400 MIME-Version: 1.0 In-Reply-To: <5434352A.6080403@linux.vnet.ibm.com> References: <543428E1.7050702@linux.vnet.ibm.com> <20141007180209.GD10432@obsidianresearch.com> <5434352A.6080403@linux.vnet.ibm.com> From: Andy Lutomirski Date: Tue, 7 Oct 2014 11:59:04 -0700 Message-ID: Subject: Re: [tpmdd-devel] [TrouSerS-tech] [Ksummit-discuss] TPM MiniSummit @ LinuxCon Europe To: Stefan Berger Cc: Jason Gunthorpe , Peter Huewe , keyrings@linux-nfs.org, jarkko.sakkinnen@linux.intel.com, "ksummit-discuss@lists.linuxfoundation.org" , "linux-kernel@vger.kernel.org" , LSM List , tpmdd-devel@lists.sourceforge.net, James Morris , linux-ima-devel@lists.sourceforge.net, trousers-tech@lists.sourceforge.net Content-Type: text/plain; charset=UTF-8 Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Tue, Oct 7, 2014 at 11:47 AM, Stefan Berger wrote: > On 10/07/2014 02:02 PM, Jason Gunthorpe wrote: >> >> On Tue, Oct 07, 2014 at 01:54:41PM -0400, Stefan Berger wrote: >> >>> Why add the complexity of swapping of authenticated sessions and keys >>> into the kernel if you can handle this in userspace? You need a library >>> that is aware of the number of key slots and slots for sessions in the >>> TPM and swaps them in at out when applications need them. Trousers is >>> such a library that was designed to cope with the limitations of the >>> device and make its functionality available to all applications that >>> want to access it. >> >> How does trousers work with the kernel when the kernel is also using >> TPM key slots for IMA/keyring/whatever? > > > IIRC it only uses a single key slot and swaps all keys in and out of that > one. If the kernel was to fill up all key (and sessions) slots, TSS would > probably not work anymore. > > Another argument for the TSS is that you also wouldn't want applications to > swap out each others keys and sessions and leave them out or assume that > they would always cleanup if they do not currently need them. That argument seems backwards. If you're worried about applications (or trousers itself!) failing to clean up, then shouldn't the kernel driver clean up orphaned key slots itself? Also, what protects the kernel from having slot 0 get stomped on or, worse, inappropriately used by a misbehaving or malicious user program? Is the authorization session mechanism really secure against intentional abuse by users of the same machine? --Andy -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/