Re: [tboot-devel] Creating a TXT/tboot policy suitable for a modern system with TXT+TPM2

2019-11-08 Thread Travis.Gilbert
> -Original Message- > From: Paul Moore (pmoore2) > Sent: Friday, November 8, 2019 11:19 > To: lukasz.hawry...@linux.intel.com; Gilbert, Travis > Cc: tboot-devel@lists.sourceforge.net > Subject: Re: [tboot-devel] Creating a TXT/tboot policy suitable for a modern > system with TXT+TPM2 >

Re: [tboot-devel] Creating a TXT/tboot policy suitable for a modern system with TXT+TPM2

2019-11-08 Thread Paul Moore (pmoore2) via tboot-devel
On Fri, 2019-11-08 at 12:47 +0100, Lukasz Hawrylko wrote: > For TPM2.0 LCP generation there is a Python tool lcp-gen2 that is > included in tboot's source code. To be honest I didn't try to generate > LCP with tboot's VLP inside but it should work. If not - this is a bug > and need to be fixed. >

Re: [tboot-devel] Creating a TXT/tboot policy suitable for a modern system with TXT+TPM2

2019-11-08 Thread Lukasz Hawrylko
For TPM2.0 LCP generation there is a Python tool lcp-gen2 that is included in tboot's source code. To be honest I didn't try to generate LCP with tboot's VLP inside but it should work. If not - this is a bug and need to be fixed. lcptools-v2 will is not maintained, any new features like new