On Wed, Oct 11, 2023 at 09:35:22PM +0000, Alexander Graf wrote:
When running Linux inside a Nitro Enclave, the hypervisor provides aAlex are you going to publish the spec patch for this device? Important
special virtio device called "Nitro Security Module" (NSM). This device
has 3 main functions:
1) Provide attestation reports
2) Modify PCR state
3) Provide entropy
This patch adds a driver for NSM that exposes a /dev/nsm device node which
user space can issue an ioctl on this device with raw NSM CBOR formatted
commands to request attestation documents, influence PCR states, read
entropy and enumerate status of the device. In addition, the driver
implements a hwrng backend.
Originally-by: Petre Eftime <petre.eftime@xxxxxxxxx>
Signed-off-by: Alexander Graf <graf@xxxxxxxxxx>
so we don't need to guess at behaviour when e.g. making changes to
virtio APIs. Also, which tree do you want this to go through?