Gentoo Archives: gentoo-security

From: Dan Noe <dpn@×××××××××.net>
To: gentoo-security@l.g.o
Subject: Re: [gentoo-security] Why we need TPM in Linux kernel?
Date: Tue, 22 Nov 2005 23:28:31
Message-Id: 20051122231517.GB22743@colobus.isomerica.net
In Reply to: [gentoo-security] Why we need TPM in Linux kernel? by Serge Koksharov
1 On Wed, Nov 23, 2005 at 02:04:58AM +0300, Serge Koksharov wrote:
2 > I'm worried with the so-called "Treacherous Computing" appearance in
3 > recent Linux kernels. I have read about it on EFF & GNU portals and
4 > can't see any benefits for Free Society by supporting this technology.
5 > Also it looks like this TPM drivers were written by IBM employees. I
6 > suspect IBM pushed this into kernel. I understand what this drivers come
7 > in source form under GPL, anybody can just don't compile them in, but
8 > again what benefits this drivers can bring for casual Linux user?
9
10 This feature can be used to ensure only code signed by the user or
11 developer can run on a specific system. This would enable enhanced
12 virus/malware protection, because the evil code wouldn't be signed by a
13 trusted party.
14
15 I don't know much about the technology at this point, but like many
16 things just because it /can/ be abused doesn't mean it is per se a bad
17 idea. It can be used to make computing safer, especially in an open
18 source environment where the uses are freely criticized (IE, nobody is
19 going to put DRM that you can't disable in the kernel).
20
21 -D
22
23 --
24 /--------------- - - - - - -
25 | Dan Noe, freelance hacker
26 | http://isomerica.net/

Replies

Subject Author
Re: [gentoo-security] Why we need TPM in Linux kernel? Taka John Brunkhorst <antiwmac@×××××.com>
[gentoo-security] Re: Why we need TPM in Linux kernel? Anthony Gorecki <agorecki@××××××××××.com>