Re: [PATCH] tpm: Add module parameter for hwrng quality.

From: Jarkko Sakkinen
Date: Thu Jun 21 2018 - 12:21:20 EST


On Mon, Jun 18, 2018 at 01:33:06PM -0600, Jason Gunthorpe wrote:
> > > +module_param(override_rng_quality, short, 0644);
> >
> > Should this be 600 i.e. not to leak this information?
>
> There is a real push these days against adding module parameters, and
> apparently, IMA can't function with TPM as a module.
>
> Are you sure this shouldn't be done in some other way?

Maybe a sysfs file would be a better choice for this?

/Jarkko