Re: Seal/Unseal trusted keys against PCR policy

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Fri, Jan 6, 2023 at 5:17 PM Ken Goldman <kgold@xxxxxxxxxxxxx> wrote:
>
> I discourage anyone from using scripted command line tools as production
> code.  IMHO, they're fine for learning and prototyping but that's all.

Well you can discourage it all you want but:
1. People do it
2. Shell languages exist for a reason
3. There is no semantic difference between a shell script and a program.

This is one of those pedantry vs pragmatism idioms.

>
> On 1/6/2023 5:23 PM, William Roberts wrote:
> > If you need to do this in production that tpmproxy allows anyone to
> > connect to it. So while it's open it
> > would circumvent the permissions on /dev/tpmrm0. You can just use
> > tpm2-tools, which uses
> > contexts and avoids this problem.



[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Linux Kernel]     [Linux Kernel Hardening]     [Linux NFS]     [Linux NILFS]     [Linux USB Devel]     [Video for Linux]     [Linux Audio Users]     [Yosemite News]     [Linux SCSI]

  Powered by Linux