Messages in this thread | | | Date | Thu, 09 Oct 2008 10:25:05 -0700 | From | Jeremy Fitzhardinge <> | Subject | Re: [RFC][PATCH 3/3] TXT: Intel(R) TXT and tboot kernel support |
| |
Cihula, Joseph wrote: > --- a/security/Kconfig Mon Oct 06 12:50:47 2008 -0700 > +++ b/security/Kconfig Tue Oct 07 00:13:02 2008 -0700 > @@ -115,6 +115,23 @@ config SECURITY_DEFAULT_MMAP_MIN_ADDR > /proc/sys/vm/mmap_min_addr tunable. > > > +config TXT >
This should be X86_TXT; perhaps even X86_INTEL_TXT unless someone else is likely to implement this stuff. ("TXT" is awfully generic.)
> + bool "Enable Intel(R) Trusted Execution Technology (TXT)" > + depends on EXPERIMENTAL && X86 > + help > + This option enables support for booting the kernel with > + the Trusted Boot (tboot) module. This will utilize > + Intel(R) Trusted Execution Technology (TXT) to perform a > + measured launch of the kernel. If the system does not > + support TXT, this will have no effect. > + > + See <http://www.intel.com/technology/security/> for more > + information about Intel(R) TXT. > + And see <http://tboot.sourceforge.net> for more information > + about tboot. > + > + If you are unsure as to whether this is required, answer N. > + > source security/selinux/Kconfig > source security/smack/Kconfig >
J
| |