[PATCH] KEYS: trusted: allow module init if TPM is inactive or deactivated
Roberto Sassu
roberto.sassu at huawei.com
Mon Aug 5 16:04:06 UTC 2019
On 8/5/2019 5:54 PM, Mimi Zohar wrote:
> On Mon, 2019-08-05 at 16:50 +0200, Roberto Sassu wrote:
>> Regarding Mimi's proposal to avoid the issue by extending the PCR with
>> zeros, I think it also achieve the goal.
>
> Roberto, removing the following code from init_digests() would be the
> equivalent to the prior code, without needing to make any other
> changes. Let's keep it simple. Do you want to post the patch with
> the change, or should I?
I will send the new patch.
Roberto
--
HUAWEI TECHNOLOGIES Duesseldorf GmbH, HRB 56063
Managing Director: Li Peng, Li Jian, Shi Yanli
More information about the Linux-security-module-archive
mailing list