On Fri, Jan 6, 2023 at 5:17 PM Ken Goldman <kgold@xxxxxxxxxxxxx> wrote: > > I discourage anyone from using scripted command line tools as production > code. IMHO, they're fine for learning and prototyping but that's all. Well you can discourage it all you want but: 1. People do it 2. Shell languages exist for a reason 3. There is no semantic difference between a shell script and a program. This is one of those pedantry vs pragmatism idioms. > > On 1/6/2023 5:23 PM, William Roberts wrote: > > If you need to do this in production that tpmproxy allows anyone to > > connect to it. So while it's open it > > would circumvent the permissions on /dev/tpmrm0. You can just use > > tpm2-tools, which uses > > contexts and avoids this problem.