Messages in this thread | | | Date | Wed, 8 Feb 2023 04:31:03 -0500 | From | "Michael S. Tsirkin" <> | Subject | Re: Linux guest kernel threat model for Confidential Computing |
| |
On Tue, Feb 07, 2023 at 08:51:56PM -0500, Theodore Ts'o wrote: > Why not just simply compile a special CoCo kernel that doesn't have > any drivers that you don't trust.
Or at least, start with that? You can then gradually expand that until some config is both acceptable to distros and seems sufficiently trusty to the CoCo project. Lots of kernel features got upstreamed this way. Requirement to have an arbitrary config satisfy CoCo seems like a very high bar to clear.
-- MST
| |