linux-kernel - Re: [RFC][PATCH 3/3] TXT: Intel(R) TXT and tboot kernel support

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Thu, 09 Oct 2008 10:25:05 -0700
From:	Jeremy Fitzhardinge <jeremy@...p.org>
To:	"Cihula, Joseph" <joseph.cihula@...el.com>
CC:	linux-kernel@...r.kernel.org, "Wang, Shane" <shane.wang@...el.com>,
	"Wei, Gang" <gang.wei@...el.com>,
	"Van De Ven, Arjan" <arjan.van.de.ven@...el.com>,
	"Mallick, Asit K" <asit.k.mallick@...el.com>,
	"Nakajima, Jun" <jun.nakajima@...el.com>,
	Chris Wright <chrisw@...hat.com>,
	Jan Beulich <jbeulich@...ell.com>, mingo@...e.hu, tytso@....edu
Subject: Re: [RFC][PATCH 3/3] TXT: Intel(R) TXT and tboot kernel support

Cihula, Joseph wrote:
> --- a/security/Kconfig	Mon Oct 06 12:50:47 2008 -0700
> +++ b/security/Kconfig	Tue Oct 07 00:13:02 2008 -0700
> @@ -115,6 +115,23 @@ config SECURITY_DEFAULT_MMAP_MIN_ADDR
>  	  /proc/sys/vm/mmap_min_addr tunable.
>  
>  
> +config TXT
>   

This should be X86_TXT; perhaps even X86_INTEL_TXT unless someone else 
is likely to implement this stuff.  ("TXT" is awfully generic.)


> +        bool "Enable Intel(R) Trusted Execution Technology (TXT)"
> +        depends on EXPERIMENTAL && X86
> +        help
> +          This option enables support for booting the kernel with
> +          the Trusted Boot (tboot) module. This will utilize
> +          Intel(R) Trusted Execution Technology (TXT) to perform a
> +          measured launch of the kernel. If the system does not
> +          support TXT, this will have no effect.
> +
> +          See <http://www.intel.com/technology/security/> for more
> +          information about Intel(R) TXT.
> +          And see <http://tboot.sourceforge.net> for more information
> +          about tboot.
> +
> +          If you are unsure as to whether this is required, answer N.
> +
>  source security/selinux/Kconfig
>  source security/smack/Kconfig
>   

    J
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/