@TechReport{Dartmouth:TR2003-471, author = {Rich MacDonald and Sean W. Smith and John Marchesini and Omen Wild}, title = {{Bear: An Open-Source Virtual Secure Coprocessor based on TCPA}}, institution = {Dartmouth College, Computer Science}, address = {Hanover, NH}, number = {TR2003-471}, year = {2003}, month = {August}, URL = {http://www.cs.dartmouth.edu/reports/TR2003-471.ps.Z}, comment = { Superceded by TR2003-476. }, abstract = { This paper reports on our ongoing project to use TCPA to transform a desktop Linux machine into a virtual secure coprocessor: more powerful but less secure than higher-end devices. We use TCPA hardware and modified boot loaders to protect fairly static components, such as a trusted kernel; we use an enforcer module---configured as Linux Security Module---to protected more dynamic system components; we use an encrypted loopback filesystem to protect highly dynamic components. All our code is open source and available under GPL from http://enforcer.sourceforge.net/ } }