Re: [tpmdd-devel] [PATCH 1/2] tpm2: add session handle isolation to tpm spaces

From: Jarkko Sakkinen
Date: Fri Jan 20 2017 - 15:52:31 EST


On Fri, Jan 20, 2017 at 09:27:25AM -0500, Ken Goldman wrote:
> On 1/20/2017 8:23 AM, Jarkko Sakkinen wrote:
> >
> > I'm talking about not trying to detect if something gets deleted. When
> > something gets created you would go through the global list of sessions
> > and check if it is used. If so, it must be that the session was deleted
> > at some point.
>
> Are you saying that, when a process flushes (or continue = false) a
> session, this code won't actually flush the context? You'll wait until
> another startauthsession creates a handle, and then delete other
> occurrences of it?

I just wouldn't get care if a session gets deleted. You can detect it
postmortem when something gets created with the same handle.

/Jarkko