lkml.org 
[lkml]   [2023]   [May]   [10]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [PATCH v6 12/14] x86: Secure Launch late initcall platform module
    On Thu May 4, 2023 at 5:50 PM EEST, Ross Philipson wrote:
    > From: "Daniel P. Smith" <dpsmith@apertussolutions.com>
    >
    > The Secure Launch platform module is a late init module. During the
    > init call, the TPM event log is read and measurements taken in the
    > early boot stub code are located. These measurements are extended
    > into the TPM PCRs using the mainline TPM kernel driver.
    >
    > The platform module also registers the securityfs nodes to allow
    > access to TXT register fields on Intel along with the fetching of
    > and writing events to the late launch TPM log.
    >
    > Signed-off-by: Daniel P. Smith <dpsmith@apertussolutions.com>
    > Signed-off-by: garnetgrimm <grimmg@ainfosec.com>
    > Signed-off-by: Ross Philipson <ross.philipson@oracle.com>
    > ---
    > arch/x86/kernel/Makefile | 1 +
    > arch/x86/kernel/slmodule.c | 520 +++++++++++++++++++++++++++++++++++++++++++++
    > 2 files changed, 521 insertions(+)
    > create mode 100644 arch/x86/kernel/slmodule.c
    >
    > diff --git a/arch/x86/kernel/Makefile b/arch/x86/kernel/Makefile
    > index 3d2a33e..ee3fe300 100644
    > --- a/arch/x86/kernel/Makefile
    > +++ b/arch/x86/kernel/Makefile
    > @@ -73,6 +73,7 @@ obj-$(CONFIG_IA32_EMULATION) += tls.o
    > obj-y += step.o
    > obj-$(CONFIG_INTEL_TXT) += tboot.o
    > obj-$(CONFIG_SECURE_LAUNCH) += slaunch.o
    > +obj-$(CONFIG_SECURE_LAUNCH) += slmodule.o
    > obj-$(CONFIG_ISA_DMA_API) += i8237.o
    > obj-y += stacktrace.o
    > obj-y += cpu/
    > diff --git a/arch/x86/kernel/slmodule.c b/arch/x86/kernel/slmodule.c
    > new file mode 100644
    > index 0000000..70dcff5
    > --- /dev/null
    > +++ b/arch/x86/kernel/slmodule.c
    > @@ -0,0 +1,520 @@
    > +// SPDX-License-Identifier: GPL-2.0
    > +/*
    > + * Secure Launch late validation/setup, securityfs exposure and
    > + * finalization support.

    /* Secure Launch late validation/setup, securityfs exposure and finalization */

    79 characters (max length allowed is 100).

    BR, Jarkko

    \
     
     \ /
      Last update: 2023-05-11 00:41    [W:4.595 / U:0.600 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site