On 1/16/2019 12:19 PM, Dave Jiang wrote:
On 1/16/19 11:02 AM, Jane Chu wrote:
Hi, Vishal,
On 1/11/2019 3:36 PM, Verma, Vishal L wrote:
On Fri, 2019-01-11 at 15:18 -0800, Jane Chu wrote:
Hi, Dave,
Where is your ndctl git tree that might clone from to test the
security features?
Hi Jane,
I pushed out a for-v64-security branch with this (v7) series:
https://github.com/pmem/ndctl/tree/for-v64-security
I believe Dave plans to have v8 out early next week with a few changes,
most notably the loadkeys script becomes a first class ndctl command.
Just thought I might get a quick answer here although I haven't
gone thru all my homework.
I'm seeing "FAIL: security.sh" from "make KVER=5.0.0 check" on a NVDIMM system,
the security.sh.log indicates
+ '[' '!' -f /usr/bin/keyctl ']'
+ '[' '!' -d /etc/ndctl/keys ']'
+ echo '/etc/ndctl/keys directory does not exist.'
/etc/ndctl/keys directory does not exist.
+ exit 1
Indeed, what step did I miss?
Jane,
For now just go ahead and create the /etc/ndctl/keys directory to try
the test. Also, we discovered that the security test needs to be run as
a root user or sudo -i, just sudo will not do due to not having access
to the root user key ring. As Vishal said there's an update coming which
addresses several issues we found in the script.
Thanks Dave! Will try the trick with the upcoming update.
thanks,
-jane
Thanks!
-jane
-Vishal
Thanks!
-jane
On 1/9/2019 9:53 AM, Dave Jiang wrote:
The following series implements mechanisms that utilize the sysfs
knobs
provided by the kernel in order to support the Intel DSM v1.8 spec
that provides security to NVDIMM. The following abilities are
added:
1. display security state
2. enable/update passphrase
3. disable passphrase
4. freeze security
5. secure erase
6. overwrite
7. master passphrase enable/update
_______________________________________________
Linux-nvdimm mailing list
[email protected]
https://lists.01.org/mailman/listinfo/linux-nvdimm
_______________________________________________
Linux-nvdimm mailing list
[email protected]
https://lists.01.org/mailman/listinfo/linux-nvdimm
