enable CONFIG_INTEL_TXT

[Chris Wright]

* James Morris (jmorris at namei.org) wrote:
> You mention 
> 
> "They agreed to make any changes necessary to their BIOS (UEFI) to support 
> this technology without the need for the separate closed source 
> proprietary Intel signed blob"
> 
> Does TXT still depend on this proprietary blob?

Yes (TXT as in CPU instructions, not TXT as in CONFIG_TXT).  The SENTER
insn will still load the binary blob.  However SENTER is something that
is done by tboot before the kernel is launched.  The difference now is
that Fedora does not need to care about the SINIT AC module in terms of
grub.conf, distribution, etc.  tboot knows how to find SINIT AC from the
BIOS, and some hw vendors like IBM are willing to deliver it that way.

thanks,
-chris