linux-kernel - Re: [RFC PATCH 2/2] tee: add OP-TEE driver

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-Id: <3960750D-EAE4-4FA0-9E15-89F9CE39257E@javigon.com>
Date:	Sun, 19 Apr 2015 13:17:20 +0200
From:	Javier González <javier@...igon.com>
To:	Arnd Bergmann <arnd@...db.de>
Cc:	Greg Kroah-Hartman <gregkh@...uxfoundation.org>,
	Jens Wiklander <jens.wiklander@...aro.org>,
	Linux Kernel Mailing List <linux-kernel@...r.kernel.org>,
	linux-arm-kernel@...ts.infradead.org, devicetree@...r.kernel.org,
	Herbert Xu <herbert@...dor.apana.org.au>,
	tpmdd-devel@...ts.sourceforge.net,
	Valentin Manea <valentin.manea@...wei.com>,
	jean-michel.delorme@...com, emmanuel.michel@...com
Subject: Re: [RFC PATCH 2/2] tee: add OP-TEE driver

> On 18 Apr 2015, at 21:01, Arnd Bergmann <arnd@...db.de> wrote:
> 
> On Saturday 18 April 2015 20:49:03 Greg Kroah-Hartman wrote:
>> On Sat, Apr 18, 2015 at 11:36:53AM +0200, Javier González wrote:
>>> Hi,
>> 
>> A: No.
>> Q: Should I include quotations after my reply?
>> 
>> http://daringfireball.net/2007/07/on_top
>> 
>>> We have discussed and implemented an in-kernel interface for the driver.
>>> However, we need to agree on that interface with the kernel submodules that
>>> can be interested in using it (e.g., IMA, keyring). We though it was easier
>>> to have a framework in place before taking this space. This makes sense
>>> since a TEE driver will be, as for today, mostly used by user space.
>>> applications.
>> 
>> No, please provide a "real" solution, just providing a framework that no
>> one uses means that I get to delete it from the kernel tree the next
>> release, and I doubt you want that
>> 
>> Please do all of the work here, as odds are, what you need in the end
>> will be different from what you have proposed here.
> 
> I guess an alternative would be to remove all the unused infrastructure
> code and only provide a user space interface for the features that
> op_tee requires, but no optional user interfaces or in-kernel interfaces.
> 
> 	Arnd

Only providing user space support would defeat one of the main purposes
of the driver. We could better organize the patches and divide them into user
space support and in-kernel support if that is what you mean. In the end
the interfaces are orthogonal, even though the functionality should be very
similar.


Javier.

Download attachment "signature.asc" of type "application/pgp-signature" (843 bytes)