Re: [tboot-devel] Creating a TXT/tboot policy suitable for a modern system with TXT+TPM2

2019-11-13 Thread Paul Moore (pmoore2) via tboot-devel
On Wed, 2019-11-13 at 17:17 +, travis.gilb...@dell.com wrote: > > -Original Message- > > From: Paul Moore (pmoore2) > > Sent: Wednesday, November 13, 2019 09:51 > > To: lukasz.hawry...@linux.intel.com; Gilbert, Travis > > Cc: tboot-devel@lists.sourceforge.net > > Subject: Re: [tboot-de

Re: [tboot-devel] Creating a TXT/tboot policy suitable for a modern system with TXT+TPM2

2019-11-13 Thread Travis.Gilbert
> -Original Message- > From: Paul Moore (pmoore2) > Sent: Wednesday, November 13, 2019 09:51 > To: lukasz.hawry...@linux.intel.com; Gilbert, Travis > Cc: tboot-devel@lists.sourceforge.net > Subject: Re: [tboot-devel] Creating a TXT/tboot policy suitable for a modern > system with TXT+TPM2

Re: [tboot-devel] Creating a TXT/tboot policy suitable for a modern system with TXT+TPM2

2019-11-13 Thread Travis.Gilbert
> -Original Message- > From: Lukasz Hawrylko > Sent: Wednesday, November 13, 2019 08:24 > To: Gilbert, Travis; pmoo...@cisco.com > Cc: tboot-devel@lists.sourceforge.net > Subject: Re: [tboot-devel] Creating a TXT/tboot policy suitable for a modern > system with TXT+TPM2 > > > Thank you f

Re: [tboot-devel] Creating a TXT/tboot policy suitable for a modern system with TXT+TPM2

2019-11-13 Thread Paul Moore (pmoore2) via tboot-devel
I'm glad to hear that Python 3.x support is in the works, but I remain concerned about the CLI support. While JSON/XML is better than nothing, it still adds a bit of pain for those of us wishing to script the tools; while a parameter based approach might not be pretty, it is much easier to script.

Re: [tboot-devel] Creating a TXT/tboot policy suitable for a modern system with TXT+TPM2

2019-11-13 Thread Lukasz Hawrylko
Thank you for feedback, I understand your point. I was talking with tools maintainer and he started working on migration to Python 3.x and better CLI support (together with documentation how to use it). Our idea is not to add enormous list parameters to generate LCP with desired options, but to add