lkml.org 
[lkml]   [2020]   [Apr]   [16]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    Patch in this message
    /
    From
    Subject[PATCH 5.5 112/257] efi/x86: Add TPM related EFI tables to unencrypted mapping checks
    Date
    From: Tom Lendacky <thomas.lendacky@amd.com>

    commit f10e80a19b07b58fc2adad7945f8313b01503bae upstream.

    When booting with SME active, EFI tables must be mapped unencrypted since
    they were built by UEFI in unencrypted memory. Update the list of tables
    to be checked during early_memremap() processing to account for the EFI
    TPM tables.

    This fixes a bug where an EFI TPM log table has been created by UEFI, but
    it lives in memory that has been marked as usable rather than reserved.

    Signed-off-by: Tom Lendacky <thomas.lendacky@amd.com>
    Signed-off-by: Ard Biesheuvel <ardb@kernel.org>
    Signed-off-by: Ingo Molnar <mingo@kernel.org>
    Cc: linux-efi@vger.kernel.org
    Cc: Ingo Molnar <mingo@kernel.org>
    Cc: Thomas Gleixner <tglx@linutronix.de>
    Cc: David Hildenbrand <david@redhat.com>
    Cc: Heinrich Schuchardt <xypron.glpk@gmx.de>
    Cc: <stable@vger.kernel.org> # v5.4+
    Link: https://lore.kernel.org/r/4144cd813f113c20cdfa511cf59500a64e6015be.1582662842.git.thomas.lendacky@amd.com
    Link: https://lore.kernel.org/r/20200228121408.9075-2-ardb@kernel.org
    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

    ---
    arch/x86/platform/efi/efi.c | 2 ++
    1 file changed, 2 insertions(+)

    --- a/arch/x86/platform/efi/efi.c
    +++ b/arch/x86/platform/efi/efi.c
    @@ -85,6 +85,8 @@ static const unsigned long * const efi_t
    #ifdef CONFIG_EFI_RCI2_TABLE
    &rci2_table_phys,
    #endif
    + &efi.tpm_log,
    + &efi.tpm_final_log,
    };

    u64 efi_setup; /* efi setup_data physical address */

    \
     
     \ /
      Last update: 2020-04-16 15:52    [W:4.196 / U:0.920 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site