[MIR] tboot

[Gang Wei]

[Background information]:
Trusted Boot (tboot) is an open source, pre-kernel/VMM module that uses Intel Trusted Execution Technology (Intel TXT) to perform a measured and verified launch of an OS kernel/VMM.

[Availability]: In the Ubuntu universe since 11.10.

[Rationale]: This package is required to take advantage of Intel Trusted Execution Technology.

[Security]:
CVE(http://cve.mitre.org/cve/cve.html): One vulnerability(CVE-2009-0066) was found.
Secunia Advisory(http://secunia.com/advisories/search): One advisory(SA37900) was found, fixed with updated SINIT.
All tools are installed into /usr/sbin/.

[Quality assurance]: No obvious issues with the MIR requirements

[UI standard]: Not applicable

[Dependencies]: Build dependencies: libtspi-dev, libssl-dev. Binary dependencie: libc6 (>= 2.14) libssl1.0.0 (>= 1.0.0) libtspi1 (>= 0.3.1) zlib1g (>= 1:1.1.4) .

[Standards compliance]: No issues identified

[Maintenance]: TBD.

[Jamie Strandboge (jdstrand)]

Based on conversations outside of this bug, I am unassigning myself for now. When it is clear that this is something that Foundations or Server wants, please feel free to assign back to me.

[Michael Terry (mterry)]

I wasn't a part of that conversation, but based on Jamie's comment, sounds like this is a Won't Fix.

[Gang Wei (gang-wei)]

Can't it be considered in 13.04?

[Michael Terry (mterry)]

I wasn't part of the conversation, but maybe Jamie can comment on whether "this is something that Foundations or Server wants" is more true for 13.04 than 12.10.

[Jamie Strandboge (jdstrand)]

My comment meant to simply say that the Ubuntu Security team is not driving the tboot feature or the trusted boot installation choice in the Ubuntu installer and at the time it was not clear if this feature was going to be pursued. I unassigned myself and my team since there is nothing for us to do at this time. The team implementing this feature would need to comment on any plans for this feature for 13.04. When it is implemented, feel free to reassign ubuntu-security for the MIR security review.