Re: [PATCH v2 2/2] tpm: Disable TPM on TPM_RC_INITIALIZE

[Jarkko Sakkinen]

On Fri, Nov 13, 2026 at 01:31:13AM +0200, Jarkko Sakkinen wrote:
> On Thu, Nov 12, 2026 at 10:57:59PM +0000, David Laight wrote:
> > On Thu, 12 Nov 2026 04:30:18 -0800
> > Breno Leitao <leitao@xxxxxxxxxx> wrote:
> > 
> > > From: Jarkko Sakkinen <jarkko@xxxxxxxxxx>
> > > 
> > > If the TPM has been spuriously disabled, the game is over. Let's reflect
> > > this truth with TPM_CHIP_FLAG_DISABLE.
> > 
> > Shouldn't it be completely 'game over'?
> > (aka panic time...)
> 
> There's nothing pointing to that direction. Nothing is really broken
> except likely firmware bug or similar situation. We don't want to brick
> the machine because of that. Neither security is endangered as
> anything that  was sealed with TPM, it is inaccessible.
> 
> It's also useful for us that any possible user has a chance to run e.g.,
> acpidump without kernel pulling the carpet.

And fTPM tripping has been reoccuring theme since they first arrived in
2014; not something extremely rare that "almost never" would happen.

Br, Jarkko