Re: [PATCH RFC v11 5/19] ipe: introduce 'boot_verified' as a trust provider

On 10/23/2023 8:52 PM, Paul Moore wrote: On Oct 4, 2023 Fan Wu wrote: IPE is designed to provide system level trust guarantees, this usually implies that trust starts from bootup with a hardware root of trust, which validates the bootloader. After this, the bootloader verifies the kernel a

Re: [PATCH RFC v11 2/19] ipe: add policy parser

On Wed, Oct 25, 2023 at 6:46 PM Fan Wu wrote: > On 10/23/2023 8:52 PM, Paul Moore wrote: > > On Oct 4, 2023 Fan Wu wrote: > >> > >> IPE's interpretation of the what the user trusts is accomplished through > >> its policy. IPE's design is to not provide support for a single trust > >> provider, b

Re: [PATCH RFC v11 5/19] ipe: introduce 'boot_verified' as a trust provider

On Thu, Oct 26, 2023 at 5:33 PM Fan Wu wrote: > On 10/23/2023 8:52 PM, Paul Moore wrote: > > On Oct 4, 2023 Fan Wu wrote: > >> > >> IPE is designed to provide system level trust guarantees, this usually > >> implies that trust starts from bootup with a hardware root of trust, > >> which validate