| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: Thu, 4 Dec 2008 10:29:39 +1100 (EST) From: James Morris <jmorris@...ei.org> To: Andrew Morton <akpm@...ux-foundation.org> cc: Mimi Zohar <zohar@...ux.vnet.ibm.com>, linux-kernel@...r.kernel.org, Christoph Hellwig <hch@...radead.org>, viro@...IV.linux.org.uk, safford@...son.ibm.com, serue@...ux.vnet.ibm.com Subject: Re: [PATCH 0/4] integrity On Fri, 14 Nov 2008, Andrew Morton wrote: > One thing which I cannot say, and which is quite important: how useful > will all of this be to our users? Are people asking for it? Apparently, some government users are, and there's a DoD decree which requires new equipment to include TPM hardware where possible: http://iase.disa.mil/policy-guidance/dod-dar-tpm-decree07-03-07.pdf This is to support encryption of data at rest, and for "device authentication" (requiring remote attestation of system integrity). It's not clear to me yet how compelling this will be for general-case users. > Are > people likely to enable and use it? Are they even likely to understand > it? ;) Are any large/important customers asking for it? Are distros > likely to enable and support it? I believe that TPM is in "tech preview" in RHEL 5.2, and that there is a desire to integrate it more fully with the OS via TCG software such as Trousers: http://trousers.sourceforge.net/ - James -- James Morris <jmorris@...ei.org> -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Powered by blists - more mailing lists