David Tolnay 43f8e21dd2 tpm: Runtime flag for software tpm device ... Gate the current software tpm device behind a crosvm flag called `--software-tpm`. When we get to leveraging the physical tpm, we will likely want that behind a separate `--hardware-tpm` flag that is automatically detected when the vm being launched is gLinux. Based on feedback from apronin: > Hm, long-term it may actually make sense to have software-tpm and > real-tpm-for-glinux as two separate run-time options and only enable > real-tpm-for-glinux for glinux. > > we want to protect guests from exploits, but we also want to limit > access to tpm for random guests. So, enterprises may set this to "no > TPM" for Linux images their employees run on their devices, so that > they don't get creative with trying to break TPM from inside those > images. BUG=chromium:911799 TEST=run TPM playground program inside crosvm with flag set TEST=confirm TPM playground does not run with flag unset Change-Id: I1bccf62be63d40203463623f43b1a6ee2d51f6c0 Reviewed-on: https://chromium-review.googlesource.com/1478377 Commit-Ready: David Tolnay <dtolnay@chromium.org> Tested-by: David Tolnay <dtolnay@chromium.org> Tested-by: kokoro <noreply+kokoro@google.com> Reviewed-by: Zach Reizner <zachr@chromium.org>		2019-02-21 06:29:41 -08:00
..
plugin	error: Print errors using Display impl	2019-02-20 08:20:02 -08:00
argument.rs	lint: Resolve the easier clippy lints	2018-12-03 20:32:03 -08:00
linux.rs	tpm: Runtime flag for software tpm device	2019-02-21 06:29:41 -08:00
main.rs	tpm: Runtime flag for software tpm device	2019-02-21 06:29:41 -08:00
panic_hook.rs	main: add panic hook that redirects to syslog	2019-02-07 03:02:13 -08:00