linux-kernel - Re: [PATCH v15 19/28] x86/tpm: Early TPM PCR extending driver

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <adb92eca-440b-4322-b65b-c21279710a0a@apertussolutions.com>
Date: Thu, 8 Jan 2026 11:21:31 -0500
From: "Daniel P. Smith" <dpsmith@...rtussolutions.com>
To: Dave Hansen <dave.hansen@...el.com>,
 Ross Philipson <ross.philipson@...cle.com>, linux-kernel@...r.kernel.org,
 x86@...nel.org, linux-integrity@...r.kernel.org, linux-doc@...r.kernel.org,
 linux-crypto@...r.kernel.org, kexec@...ts.infradead.org,
 linux-efi@...r.kernel.org, iommu@...ts.linux.dev
Cc: tglx@...utronix.de, mingo@...hat.com, bp@...en8.de, hpa@...or.com,
 dave.hansen@...ux.intel.com, ardb@...nel.org, mjg59@...f.ucam.org,
 James.Bottomley@...senpartnership.com, peterhuewe@....de, jarkko@...nel.org,
 jgg@...pe.ca, luto@...capital.net, nivedita@...m.mit.edu,
 herbert@...dor.apana.org.au, davem@...emloft.net, corbet@....net,
 ebiederm@...ssion.com, dwmw2@...radead.org, baolu.lu@...ux.intel.com,
 kanth.ghatraju@...cle.com, andrew.cooper3@...rix.com,
 trenchboot-devel@...glegroups.com
Subject: Re: [PATCH v15 19/28] x86/tpm: Early TPM PCR extending driver

On 1/3/26 15:44, Dave Hansen wrote:
> On 12/19/25 13:26, Daniel P. Smith wrote:
> ...
>>> I also seem to remember that there are special rules around the US
>>> federal government's inability to hold copyrights. This seems worth at
>>> least a mention ... somewhere.
>>
>> IANAL either, but in general the safest/correct approach is to retain
>> any CRs placed on the code being reused, and the above is the CR on the
>> source from the Xen tree.
> 
> Yeah, in general, that's a good thing to do.
> 
> But I'm puzzled by your response. Are you making an attempt to justify
> the past choice to copy the copyrights verbatim? Or are you declining to
> follow my request to involve your companies' legal experts given that
> you used the "safest/correct approach"?

My apologies that it came across like I was rebuffing your request. I 
was just trying to inform as to why it was there. Yes, we are working to 
determine the answer to your concern and what should be the correct 
course of action.

> FWIW, I don't think what you did was bad here. You _did_ use a quite
> reasonable approach in the case that a copyright was copied verbatim
> from an existing legitimate* project.
> 
>   * I'll give Xen the benefit of the doubt just this one time and put it
>     in the "legitimate" bucket. :P

As a Xen contributor/maintainer, thanks ... I think. (^_^)

V/r,
dps