On Mon, Nov 20, 2017 at 04:14:41PM +0000, Roberts, William C wrote: > That's policy, and shouldn't be hardcoded in the kernel. Let the DAC > permission model And LSMs sort that out. Of course this is what was done, there are two cdevs, one with full access to the TPM and one that runs through the RM. The distro/admin gets to choose how to set the up, as is typical. One of the use models for the RM cdev was to support unpriv access to that cdev, if the admin chooses to grant access to the /dev/ node. That work isn't quite complete, as it was envisioned to include kind of user space controlled command filter/restriction. Safe unpriv access is explicitly not a design goal of /dev/tpmX. Jason
