Re: [Xen-devel] [PATCH] Intel(R) Trusted Execution Technology support

[Keir Fraser <Keir.Fraser@xxxxxxxxxxxx>]

On 27/10/07 20:39, "Cihula, Joseph" <joseph.cihula@xxxxxxxxx> wrote:

>> If that's the only reason, we could add another command-line option,
> or a
>> multiboot info flag, to prevent just the e820 part of real-mode
> execution.
>> Then you could still set video mode and get disc EDD info even when
> running
>> on tboot.
> 
> It isn't the only reason:  the current tboot code will measure and
> verify xen and dom0; if we let xen call into BIOS then we will be
> transferring control to code that has not been verified.
> 
> If it is very important to initialize the video and disc from BIOS, we
> could copy that code into tboot and execute it before tboot launches the
> measured environment.  Is this necessary on current model systems (since
> TXT is only available on Intel Core 2 -based systems)?

It'd be nice to have, but it's not essential.

 -- Keir



_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel