[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Xen-devel] [PATCH 11/11] add vtpm support to libxl

On 10/02/2012 09:44 AM, Ian Campbell wrote:
> On Mon, 2012-10-01 at 19:40 +0100, Matthew Fioravante wrote:
>> Actually thinking about it more, uuids have to be attached to the
>> driver. If 2 vtpms connect to the manager, one could send the uuid of
>> the other and get access to someone elses secrets.
>> TL;DR version
>> uuids must remain part of the driver.
> What stops the driver lying about the UUID in a similar way?
The tpm backend driver (in the manager) will read the uuid from
xenstore. So as long as we trust xenstore ( and the entities who created
the entry, named libxl in dom0), we can trust the uuid and thus the
identity of the vtpm connecting to us.
> Ian.

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Xen-devel mailing list



Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.