[lkml]   [2019]   [Dec]   [12]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: [PATCH =v2 3/3] tpm: selftest: cleanup after unseal with wrong auth/policy test
On December 12, 2019 4:07:26 PM EST, Tadeusz Struk <> wrote:
>On 12/12/19 12:54 PM, James Bottomley wrote:
>> Not in the modern kernel resource manager world: anyone who is in the
>> tpm group can access the tpmrm device and we haven't added a
>> command filter like we promised we would, so unless they have
>> set lockout or platform authorization, they'll find they can execute
>The default for the tpm2_* tools with '-T device' switch is to talk to
>If one would try to run it, by mistake, it would fail with:
>$ tpm2_clear -T device
>Failed to open device file /dev/tpm0: Permission denied
>To point it to /dev/tpmrm0 it would need to be:
>$ tpm2_clear -T device:/dev/tpmrm0

And most other toolkits talk to the tpmrm device because the tpm 1.2 daemon based architecture didn't work so well. The point is that if tpm2_clear works on your emulator, it likely works on your real tpm, so making the tests safer to run is not unreasonable.


Sent from my Android device with K-9 Mail. Please excuse my brevity.

 \ /
  Last update: 2019-12-12 22:13    [W:0.038 / U:3.552 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site