AMDGPU Working On "Secure Display" Functionality

[agd5f]

Linux never cared for any EAL security levels and AMD doesn't give a shit about MLS. AMD is implementing this because of DRM and DRM only.

As I said before, this has nothing to do with DRM. Say you have a power plant and you have a display that shows the pressure on a reactor. You'd want to independent mechanism to verify that the display is updating properly and showing what you expect to see.

[polarathene]

Well in those movie scenarios where camera feeds are hijacked, this won't help - in those cases, the video signal from the cameras is sent unencrypted to a central computer (physical security is assumed) and that's why they're able to replace the signal. Since the video signal is hijacked before it reaches the computer in question, and there's no authentication/verification mechanism, there's no way to tell that the video signal was hijacked (unless the computer analyzes the video on a continuous basis, looking for loops, repeated segments etc.)

I was referring to the loop on monitoring screens, sometimes that's sufficient without directly manipulating the camera feed to storage (which doesn't help when reviewed after an incident, but sufficient to pull off heist and high tail it out of there without being detected during the crime).

[oiaohm]

Linux never cared for any EAL security levels and AMD doesn't give a shit about MLS. AMD is implementing this because of DRM and DRM only.

This is you being wrong again EAL is what SELinux has been about. Attempting EAL on desktop has been XACE in past it failed.

https://www.redhat.com/en/about/pres...rprise-linux-7

Server usage Linux had had EAL security levels for ages so the claim Linux never cared for any EAL security levels is absolute bull crap from you. The desktop of Linux is the weak point in the EAL implementation on Linux. Basically EAL implementation on Linux has been limited by X11 being crap and graphics driver vendors not providing the required functionality. ATI/AMD developers are telling this is not for DRM only. This is for MLS like power plants, government systems.

Like it or not uid313 we need this functionality to complete out EAL support.