8000 build: enable TPM by default? · Issue #1815 · rkt/rkt · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content
This repository was archived by the owner on Feb 24, 2020. It is now read-only.

build: enable TPM by default? #1815

Closed
jonboulle opened this issue Dec 1, 2015 · 0 comments
Closed

build: enable TPM by default? #1815

jonboulle opened this issue Dec 1, 2015 · 0 comments

Comments

@jonboulle
Copy link
Contributor

Capturing discussion from #1775 (diff) - I wrote:

... this is just deciding to build with TPM based on whether the header is present; I'm wondering if we should instead make it a ./configure flag. (This arguably collapses into my question about error handling; if that degrades safely in the no-tpm-actually-present-on-running-system case, then maybe we should just ALWAYS build with TPM?)

@mjg59 wrote:

I don't have strong feelings - I think there's maybe a stronger argument for a disable flag than an enable one?

Following our "secure by default" philosophy, I'm inclined to agree - we should consider making tpm the default build behaviour (requiring those libs, rather than autodetecting them), and providing an opt-out option to configure.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

3 participants
0