Re: [tpmdd-devel] [PATCH RFC] tpm: define a command filter

2017-01-26 Thread Jarkko Sakkinen
On Thu, Jan 26, 2017 at 11:05:06AM -0700, Jason Gunthorpe wrote: > On Thu, Jan 26, 2017 at 01:14:03PM +0200, Jarkko Sakkinen wrote: > > On Wed, Jan 25, 2017 at 03:11:36PM -0700, Jason Gunthorpe wrote: > > > On Wed, Jan 25, 2017 at 10:21:37PM +0200, Jarkko Sakkinen wrote: > > > > > > > There

Re: [tpmdd-devel] [PATCH RFC] tpm: define a command filter

2017-01-26 Thread Jason Gunthorpe
On Thu, Jan 26, 2017 at 01:14:03PM +0200, Jarkko Sakkinen wrote: > On Wed, Jan 25, 2017 at 03:11:36PM -0700, Jason Gunthorpe wrote: > > On Wed, Jan 25, 2017 at 10:21:37PM +0200, Jarkko Sakkinen wrote: > > > > > There should be anyway someway to limit what commands can be sent but > > > I

Re: [tpmdd-devel] [PATCH RFC] tpm: define a command filter

2017-01-25 Thread Jason Gunthorpe
On Wed, Jan 25, 2017 at 10:21:37PM +0200, Jarkko Sakkinen wrote: > There should be anyway someway to limit what commands can be sent but > I understand your point. What is the filter for? James and I talked about a filter to create a safer cdev for use by users. However tpms0 cannot be that

Re: [tpmdd-devel] [PATCH RFC] tpm: define a command filter

2017-01-25 Thread Jarkko Sakkinen
On Tue, Jan 24, 2017 at 12:07:07PM -0700, Jason Gunthorpe wrote: > On Tue, Jan 24, 2017 at 04:36:00PM +0200, Jarkko Sakkinen wrote: > > On Mon, Jan 23, 2017 at 05:19:18PM -0700, Jason Gunthorpe wrote: > > > On Tue, Jan 24, 2017 at 02:02:52AM +0200, Jarkko Sakkinen wrote: > > > > This commit adds a

Re: [tpmdd-devel] [PATCH RFC] tpm: define a command filter

2017-01-24 Thread Jason Gunthorpe
On Tue, Jan 24, 2017 at 04:36:00PM +0200, Jarkko Sakkinen wrote: > On Mon, Jan 23, 2017 at 05:19:18PM -0700, Jason Gunthorpe wrote: > > On Tue, Jan 24, 2017 at 02:02:52AM +0200, Jarkko Sakkinen wrote: > > > This commit adds a command filter for whitelisting a set of commands in > > > a TPM space.

Re: [tpmdd-devel] [PATCH RFC] tpm: define a command filter

2017-01-24 Thread Jarkko Sakkinen
On Mon, Jan 23, 2017 at 05:19:18PM -0700, Jason Gunthorpe wrote: > On Tue, Jan 24, 2017 at 02:02:52AM +0200, Jarkko Sakkinen wrote: > > This commit adds a command filter for whitelisting a set of commands in > > a TPM space. When a TPM space is created through /dev/tpms0, no > > commands are

[tpmdd-devel] [PATCH RFC] tpm: define a command filter

2017-01-23 Thread Jarkko Sakkinen
This commit adds a command filter for whitelisting a set of commands in a TPM space. When a TPM space is created through /dev/tpms0, no commands are allowed. The user of the TPM space must explicitly define the list of commands allowed before sending any commands. This ioctl is a one shot call so