mirror of
https://git.savannah.gnu.org/git/grub.git
synced 2026-10-21 06:49:35 +00:00
ieee1275/tcg2: Add TCG2 driver for ieee1275 PowerPC firmware
Follow recent extensions of EFI support providing a TCG2 driver with a public API for getting the maximum TPM command size and passing a TPM command through to the TPM 2. Implement this functionality using ieee1275 PowerPC firmware API calls. Move tcg2.c into the TCG2 driver. Signed-off-by: Stefan Berger <stefanb@linux.ibm.com> Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>
This commit is contained in:
1 parent
72092a8641
commit
ff14b89bda
2 files changed
+104
-1
No files matched your search
@@ -1155,7 +1155,6 @@ module = {
|
|||||||
name = tpm;
|
name = tpm;
|
||||||
common = commands/tpm.c;
|
common = commands/tpm.c;
|
||||||
ieee1275 = commands/ieee1275/ibmvtpm.c;
|
ieee1275 = commands/ieee1275/ibmvtpm.c;
|
||||||
ieee1275 = lib/ieee1275/tcg2.c;
|
|
||||||
enable = powerpc_ieee1275;
|
enable = powerpc_ieee1275;
|
||||||
};
|
};
|
||||||
|
|
||||||
@@ -2576,8 +2575,10 @@ module = {
|
|||||||
common = lib/tss2/tss2.c;
|
common = lib/tss2/tss2.c;
|
||||||
efi = lib/efi/tcg2.c;
|
efi = lib/efi/tcg2.c;
|
||||||
emu = lib/tss2/tcg2_emu.c;
|
emu = lib/tss2/tcg2_emu.c;
|
||||||
|
powerpc_ieee1275 = lib/ieee1275/tcg2.c;
|
||||||
enable = efi;
|
enable = efi;
|
||||||
enable = emu;
|
enable = emu;
|
||||||
|
enable = powerpc_ieee1275;
|
||||||
cppflags = '-I$(srcdir)/lib/tss2';
|
cppflags = '-I$(srcdir)/lib/tss2';
|
||||||
};
|
};
|
||||||
|
|
||||||
|
|||||||
@@ -23,6 +23,8 @@
|
|||||||
#include <grub/mm.h>
|
#include <grub/mm.h>
|
||||||
#include <grub/misc.h>
|
#include <grub/misc.h>
|
||||||
|
|
||||||
|
#include <tcg2.h>
|
||||||
|
|
||||||
grub_ieee1275_ihandle_t grub_ieee1275_tpm_ihandle = GRUB_IEEE1275_IHANDLE_INVALID;
|
grub_ieee1275_ihandle_t grub_ieee1275_tpm_ihandle = GRUB_IEEE1275_IHANDLE_INVALID;
|
||||||
|
|
||||||
grub_err_t
|
grub_err_t
|
||||||
@@ -53,3 +55,103 @@ grub_ieee1275_tpm_init (void)
|
|||||||
|
|
||||||
return GRUB_ERR_NONE;
|
return GRUB_ERR_NONE;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
grub_err_t
|
||||||
|
grub_tcg2_get_max_output_size (grub_size_t *size)
|
||||||
|
{
|
||||||
|
struct tpm_get_maximum_cmd_size
|
||||||
|
{
|
||||||
|
struct grub_ieee1275_common_hdr common;
|
||||||
|
grub_ieee1275_cell_t method;
|
||||||
|
grub_ieee1275_cell_t ihandle;
|
||||||
|
grub_ieee1275_cell_t catch_result;
|
||||||
|
grub_ieee1275_cell_t size;
|
||||||
|
};
|
||||||
|
struct tpm_get_maximum_cmd_size args;
|
||||||
|
static bool error_displayed = false;
|
||||||
|
grub_err_t err;
|
||||||
|
|
||||||
|
err = grub_ieee1275_tpm_init ();
|
||||||
|
if (err != GRUB_ERR_NONE)
|
||||||
|
return err;
|
||||||
|
|
||||||
|
INIT_IEEE1275_COMMON (&args.common, "call-method", 2, 2);
|
||||||
|
args.method = (grub_ieee1275_cell_t) "get-maximum-cmd-size";
|
||||||
|
args.ihandle = grub_ieee1275_tpm_ihandle;
|
||||||
|
|
||||||
|
if (IEEE1275_CALL_ENTRY_FN (&args) == -1)
|
||||||
|
return GRUB_ERR_INVALID_COMMAND;
|
||||||
|
|
||||||
|
/*
|
||||||
|
* args.catch_result is set if firmware does not support get-maximum-cmd-size.
|
||||||
|
* rc is GRUB_IEEE1275_CELL_FALSE (0) on failure.
|
||||||
|
*/
|
||||||
|
if (args.catch_result)
|
||||||
|
{
|
||||||
|
if (error_displayed == false)
|
||||||
|
{
|
||||||
|
error_displayed = true;
|
||||||
|
return grub_error (GRUB_ERR_BAD_DEVICE,
|
||||||
|
"get-maximum-cmd-size failed: Firmware is likely too old");
|
||||||
|
}
|
||||||
|
return GRUB_ERR_INVALID_COMMAND;
|
||||||
|
}
|
||||||
|
|
||||||
|
*size = args.size;
|
||||||
|
|
||||||
|
return GRUB_ERR_NONE;
|
||||||
|
}
|
||||||
|
|
||||||
|
grub_err_t
|
||||||
|
grub_tcg2_submit_command (grub_size_t input_size,
|
||||||
|
grub_uint8_t *input,
|
||||||
|
grub_size_t output_size,
|
||||||
|
grub_uint8_t *output)
|
||||||
|
{
|
||||||
|
struct tpm_pass_through_to_tpm
|
||||||
|
{
|
||||||
|
struct grub_ieee1275_common_hdr common;
|
||||||
|
grub_ieee1275_cell_t method;
|
||||||
|
grub_ieee1275_cell_t ihandle;
|
||||||
|
grub_ieee1275_cell_t buf_size;
|
||||||
|
grub_ieee1275_cell_t buf_addr;
|
||||||
|
grub_ieee1275_cell_t catch_result;
|
||||||
|
grub_ieee1275_cell_t resp_size;
|
||||||
|
};
|
||||||
|
struct tpm_pass_through_to_tpm args;
|
||||||
|
static bool error_displayed = false;
|
||||||
|
grub_err_t err;
|
||||||
|
|
||||||
|
if (input_size == 0 || input == NULL ||
|
||||||
|
output_size == 0 || output == NULL)
|
||||||
|
return GRUB_ERR_BAD_ARGUMENT;
|
||||||
|
|
||||||
|
err = grub_ieee1275_tpm_init ();
|
||||||
|
if (err != GRUB_ERR_NONE)
|
||||||
|
return err;
|
||||||
|
|
||||||
|
INIT_IEEE1275_COMMON (&args.common, "call-method", 4, 2);
|
||||||
|
args.method = (grub_ieee1275_cell_t) "pass-through-to-tpm";
|
||||||
|
args.ihandle = grub_ieee1275_tpm_ihandle;
|
||||||
|
args.buf_size = (grub_ieee1275_cell_t) input_size;
|
||||||
|
args.buf_addr = (grub_ieee1275_cell_t) input;
|
||||||
|
|
||||||
|
if (IEEE1275_CALL_ENTRY_FN (&args) == -1)
|
||||||
|
return GRUB_ERR_INVALID_COMMAND;
|
||||||
|
|
||||||
|
/* args.catch_result is set if firmware does not support pass-through-to-tpm. */
|
||||||
|
if (args.catch_result)
|
||||||
|
{
|
||||||
|
if (error_displayed == false)
|
||||||
|
{
|
||||||
|
error_displayed = true;
|
||||||
|
return grub_error (GRUB_ERR_BAD_DEVICE,
|
||||||
|
"pass-through-to-tpm failed: Firmware is likely too old");
|
||||||
|
}
|
||||||
|
return GRUB_ERR_INVALID_COMMAND;
|
||||||
|
}
|
||||||
|
|
||||||
|
grub_memcpy (output, input, args.resp_size);
|
||||||
|
|
||||||
|
return GRUB_ERR_NONE;
|
||||||
|
}
|
||||||
Reference in new issue
Block a user