From patchwork Mon Jul 29 01:44:29 2019 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Stewart Smith X-Patchwork-Id: 1138096 Return-Path: X-Original-To: incoming@patchwork.ozlabs.org Delivered-To: patchwork-incoming@bilbo.ozlabs.org Received: from lists.ozlabs.org (lists.ozlabs.org [203.11.71.2]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits)) (No client certificate requested) by ozlabs.org (Postfix) with ESMTPS id 45xjFT61Qsz9s7T for ; Mon, 29 Jul 2019 11:45:49 +1000 (AEST) Authentication-Results: ozlabs.org; dmarc=none (p=none dis=none) header.from=linux.ibm.com Received: from lists.ozlabs.org (lists.ozlabs.org [IPv6:2401:3900:2:1::3]) by lists.ozlabs.org (Postfix) with ESMTP id 45xjFT4p84zDqRp for ; Mon, 29 Jul 2019 11:45:49 +1000 (AEST) X-Original-To: skiboot@lists.ozlabs.org Delivered-To: skiboot@lists.ozlabs.org Authentication-Results: lists.ozlabs.org; spf=pass (mailfrom) smtp.mailfrom=linux.ibm.com (client-ip=148.163.156.1; helo=mx0a-001b2d01.pphosted.com; envelope-from=stewart@linux.ibm.com; receiver=) Authentication-Results: lists.ozlabs.org; dmarc=none (p=none dis=none) header.from=linux.ibm.com Received: from mx0a-001b2d01.pphosted.com (mx0a-001b2d01.pphosted.com [148.163.156.1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by lists.ozlabs.org (Postfix) with ESMTPS id 45xjDC6xhVzDqRk for ; Mon, 29 Jul 2019 11:44:43 +1000 (AEST) Received: from pps.filterd (m0098410.ppops.net [127.0.0.1]) by mx0a-001b2d01.pphosted.com (8.16.0.27/8.16.0.27) with SMTP id x6T1faGo022442 for ; Sun, 28 Jul 2019 21:44:41 -0400 Received: from e12.ny.us.ibm.com (e12.ny.us.ibm.com [129.33.205.202]) by mx0a-001b2d01.pphosted.com with ESMTP id 2u1hu113xr-1 (version=TLSv1.2 cipher=AES256-GCM-SHA384 bits=256 verify=NOT) for ; Sun, 28 Jul 2019 21:44:41 -0400 Received: from localhost by e12.ny.us.ibm.com with IBM ESMTP SMTP Gateway: Authorized Use Only! Violators will be prosecuted for from ; Mon, 29 Jul 2019 02:44:40 +0100 Received: from b01cxnp23032.gho.pok.ibm.com (9.57.198.27) by e12.ny.us.ibm.com (146.89.104.199) with IBM ESMTP SMTP Gateway: Authorized Use Only! Violators will be prosecuted; (version=TLSv1/SSLv3 cipher=AES256-GCM-SHA384 bits=256/256) Mon, 29 Jul 2019 02:44:38 +0100 Received: from b01ledav006.gho.pok.ibm.com (b01ledav006.gho.pok.ibm.com [9.57.199.111]) by b01cxnp23032.gho.pok.ibm.com (8.14.9/8.14.9/NCO v10.0) with ESMTP id x6T1ibic39256342 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Mon, 29 Jul 2019 01:44:37 GMT Received: from b01ledav006.gho.pok.ibm.com (unknown [127.0.0.1]) by IMSVA (Postfix) with ESMTP id 441CCAC05B; Mon, 29 Jul 2019 01:44:37 +0000 (GMT) Received: from b01ledav006.gho.pok.ibm.com (unknown [127.0.0.1]) by IMSVA (Postfix) with ESMTP id 27BA3AC059; Mon, 29 Jul 2019 01:44:36 +0000 (GMT) Received: from birb.localdomain (unknown [9.102.42.192]) by b01ledav006.gho.pok.ibm.com (Postfix) with SMTP; Mon, 29 Jul 2019 01:44:35 +0000 (GMT) Received: by birb.localdomain (Postfix, from userid 1000) id 7DA19478275; Mon, 29 Jul 2019 11:44:32 +1000 (AEST) From: Stewart Smith To: skiboot@lists.ozlabs.org, npiggin@gmail.com Date: Mon, 29 Jul 2019 11:44:29 +1000 X-Mailer: git-send-email 2.21.0 In-Reply-To: <20190729014430.30937-1-stewart@linux.ibm.com> References: <20190729014430.30937-1-stewart@linux.ibm.com> MIME-Version: 1.0 X-TM-AS-GCONF: 00 x-cbid: 19072901-0060-0000-0000-0000036623C5 X-IBM-SpamModules-Scores: X-IBM-SpamModules-Versions: BY=3.00011512; HX=3.00000242; KW=3.00000007; PH=3.00000004; SC=3.00000287; SDB=6.01238899; UDB=6.00653180; IPR=6.01020303; MB=3.00027934; MTD=3.00000008; XFM=3.00000015; UTC=2019-07-29 01:44:39 X-IBM-AV-DETECTION: SAVI=unused REMOTE=unused XFE=unused x-cbparentid: 19072901-0061-0000-0000-00004A54A2E7 Message-Id: <20190729014430.30937-3-stewart@linux.ibm.com> X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-07-28_16:, , signatures=0 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1015 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=690 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1906280000 definitions=main-1907290019 Subject: [Skiboot] [PATCH 2/3] Add CVC code dump for use with Mambo X-BeenThere: skiboot@lists.ozlabs.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Mailing list for skiboot development List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: skiboot-bounces+incoming=patchwork.ozlabs.org@lists.ozlabs.org Sender: "Skiboot" Signed-off-by: Stewart Smith --- external/mambo/CVC | Bin 0 -> 65535 bytes external/mambo/README.md | 11 +++++++++++ 2 files changed, 11 insertions(+) create mode 100644 external/mambo/CVC diff --git a/external/mambo/CVC b/external/mambo/CVC new file mode 100644 index 0000000000000000000000000000000000000000..9dfba3c0467a1d76ac32cfce0d312496e9006b74 GIT binary patch literal 65535 zcmeI1dt6mj+Q-*E+zzOP%`s6?AuzcW)M&F$2k`(l9S%C7**j`C2rV^BG-ul9Wp6h( zd!uXyXR6Uele{FFb{U<>ghcb!`~5w8Z-fdy^S+<=^4Ie7 z!Ts!Kt@W&Deb=+rde%NMci)jY?XD>d|3dL6kbr-2#-rzdkzN0hi?Jk;4UNPzMPw1v z@f;_zVL5n;BC|0(Q$;p-9G*_Qlf@}+)?mshraTUM(UjvLJ54zfvdfgiA?KKKAle7Y zS(Z(5#x$GEuCs|5Fp!a7BZmfT`c+Y2RF8-Mx01*NDO=N)TcT8w5zjcC(|`m&Y$W>NMiHbWVgxyc^& zy9>(r%uOyfBvRKqSt!bwk`=H?ndC}PGP4rw@ywdRv`bVjmN7xh*SvCh0NOH^;ba4S zF)S3md8wTIaUcI=Mxf(ZUK5!1De#EbsOH`PP z>@{U-zNTQ!C!dY~L~+MmCx7R(DQ@9;CB$V@5`^b{!RV7|U#fLcPRF;J*LS1lb*|NR zV2l;$*GB#OPr<)sU_t%Q9w8Z=x?03MR)GHV#FH$fNnlcA6{`_*nNw~G*d%S)mEj3p zQli99v%xPW7PA8R{fPO}!Ce`RWy~cV*cA*OHu*c@dHI7Bn=%&9uZATM3;6S?v@z(U zC#3f4#(K8LW8D=jMhoG}FOB+27{-A5${4rJH=0>}6B%MPvW&)mm31aq2f7l}Ely|p zS{ClCWRYU7rs;EH@IMJ(nLY=(OwjdFEDZDEQsTidAN=5VhLfc>#c00dEsT*J%$=Yl zuq7V%k&>oB&8Ng?*c7WP9COALYkIh1WetiulVaVHiQsjkcWd6lveB_}=?ykVEpw?Gn!ej|`F zwd^!v<*Y4R>l~9@r*j(zU&AO~$yeeU)y13{P8QiT8vch~yiJL}TT;SOZ}UymeDJT) zh`-?#M*I(->W%KKl3zv)N+T%tL*;i8B{5Gp>L?aiw$@QgI=ojveiMBOYV3zp?(#(o z4bUm-89%*K-9_|tR0&u+UGr22je967;8!h5GS-qi$#>`;a@|F`iw6)Y1m0vr?O(RyRxPn$wb!nk}jG zj!UZFFDVnVC3)TmNzMG5q}-kj`&tUx#`o%PBy<(zo7rDn&$#^eP~YllKic`{>1}km zb3zl=m{~uZ*cx>@j`Wh3C6{8ZD_O7d&LA~lpG5YvwRWEvZOO%&6I?7}Gv+7@v5J@u z*n~KUcrJzs$>n;yUqYQ9tV=OBrbf;W&k^%quIP?W*qGvt?mDIKN!SmKy|DcS#8w!1 zx@aHNlTjWojs*2+1WZtDdzlmSW2L!i!g^HVaZZ38#(W8}{TuRy&H;HT;!Gb~d%5XLES-%s z7CIZLtQq|`)A@mO5_b;pz{dj9-&=agV|vNMP~RNil{^}gQQtenu+h1n z>KfzknyLGQ{Ry_mQ(fAtAUDw%4cU9xcy>N#wCP+%{+Kpttle@IwI>dkUxDxLm z9Tw5k=E@kuC*d{PM-0ww8_A9#U!F;I!Qp7O*7lrnZjgLA-6;3BnCzkJSf=-{uieYh z)UUy_?H;oo=HznsIq(i~HOf1t5L?J#)P^&qdtTfA4*4kbI8)mOLv|T+-?qQkINvdC zQyo1fj5%sUOz5$Q*uC@_*@VB4+scin-)_|N>#=O~;oooi1Y7=Y|44>iR$#=VF658}T?;!M;^27a|__Ar5yV9#7!;63(;}%;{Li1kA-S z;z)a?!M=5yF=vz)v{vb7ww_D0?$l*HK3l7GS@*Yfjh+)BZhWcCNn9P8rWI-|3hncf zU)D6_wz)X>n7YMfryRsCfYm9i)q3n%%W!T{9P52_)F!{D@6k4~3U#io=XRyA_S%ie zZw5L}XkPNWrw?r%&ZQz_9ft1^H!^`@Uar>9Xq%Gh+OAB>+D^GO&bo_q#?!q>uTyU1 ziy2N9j=NKL9sTY^{OqL+_to(6j&(6LYHfIqqjsGa?ZO+e4x5nk;v8pmjy0cV;mxHi zqH!OKY7Ag;&HGqNQvegC!vz-UV1-4Uor65wElG!K7(JBfsdRbDv1cSm>;7n^YZTkvlSM((a4s>uX8ceMo<*9kV30GEP)0kD>n8Hnju! z8SV?}p;qMi!gToNMD8q6uHq=d-6E0+p0H7K9dk8JO~M@^GGvF{#Rl1}%vxADYOcqP zKkKNu>SXw~+?h}qx5uJPKAIqxO|umycrA)MLn^c%-mADjkP2N9OxL^T8v0pBN)-1e zlGIpWA-#0ALf1=;HH_NH?I~i@NaWSazrg(@!{&*_Si&-Fa+oMlJH<84=8224DApS! zPb|jwz%-2g21%KnAgLe zZFthX$%?!qO5Tz{?-5G;F`IY2u8)E~PMJT;=F4Xha?|ZLyr+0il` z*u0oW7rSPL-Y@!;_h9{O#X6!p`Ftboww6O(Q>bg9aOV>hd7j@e9q#qv~UG3BJED_NdHW)G3?bf*5q@4{}s zgIAD`&psgRP2Q#NGhTHLSQ0zr9q1>T%8fCwi;h{EhBZ{C&I;M#C}d^WKR&YG$A)1q z321x<``HGUGu`m}34D86X|M~&c^e#0cDm<9lv%WkS#>@b&tmiZor~BApnVJZ?+oOd zCtYm7C6wO)Ta)q3!*h~7P1xtC6_z*8gFPA_{G|Qb#e(+#ppT`(hv=i2bjDfUwGKA& zb=!z3_)hOJvlke&-o7$Er-i%&mW*Rc#S z&(cMABe43IeD*K3yeYm6y;1fTd7@tSCY9+q3B`DxrNEzOnTs~7^fs!+$S;gGH_EAc z8$JI0vhaoYQnx+f1lr7@Hrd)g2GbL3%0>6`o*d#rG|fBim;-4}Fy17+OwXe)1nDtR zsWlooaZ8mkhuTpi4`^9oz8~tzv(6te+H{@Nb^2L(zSh)zWSr$KGmUm#yNz71CChw& zjpCAWaU;L@ex{kT*?=W{N`M=S%&sjU443G$Az@7&GQO4K{*P~^BE~B-AvTryx5+HztjvO6!@6P=%lfxR zb%dw;{)*gWT+jD_^%AXL>IY-phJ2?;R9Oz>{ggXkeYo)FH13Jk*~Z$i4#s|+hr6K% zw$9-kaq6*;+{zPw;UP~fi-tZorW&@&SWe-)EK03A>O{;{(6=sq&hI)W5e%iM33X*IdkzD{ru& z%>sk(m0Qr(X^#)Y9X&uJ-?4Z7z@DR4qjmni?u+in<(<@~@Wkj?B@N$0A**$+pZXEa z*5OP@E!-Cz`@{+KEf2S0-#Dl4M{K}H;XiI~v*;x2Fmb67#|^ev#d3f~8dnDvL>7TOxnZvpnU*YGUD zxfFpui+CB_2p6Bb|5IU>$cRe1vK1R-)i!-1Bp?vjU;zkxi_W;cK?&E6sGy`9i~I74vCdEhTtyYw$YwGWi7t> zBCnoa7M!*c=eYT9fh?GE0A!0P2SN@os}cpnvchOGN7&mVz3L3^6Ua1}lTb$t}A zjU-~G#3oSQnj^2r6ZZ`G_|bF7ch=mYX*8by!uZ$yH^wi+|Npn~lkX;jvfd1m#^C%c zVX5WF!@&#pl$@!^5u)fWmYacZd`=cc-(sJeM89*mrecq{sKkWqARAOp=WZYNmX{-U zE)Qhv=4#k~kGJ#tuUhVOQVc8Z1RLFXP@aT+J{KmL{s;Td1>!p} z+Nz=Y?>0#p_%`f(iKUWHWZU_ob`t#vWQ%;ESVey+koBCr+rMsm@;qmblz;6>`qrF_ z-#f_n?%#nJ{>hsYJyS6L@=1`fF3sP0lIZsu_!dqaOkD)U{wl?3Kiz}PZ4}MR?*xx{z1v(3Kg1A}h zg02#}0O$gsvq0Ag-P6zoLKg^K0CXMDErBiwx*+HRq4PtR3tcdD!O#Uk*ACre=t7_i zfi4(2A9NygR_LtIg+S+pE*82_=t7~hLU#qaaLA+!!~11*bB>c(U?1<2b1~OcPIKlL zv_1Z4?T|lRYw+i3NBzaxNk7gM`c_W)2IU%5uNn24QLh>Gno+MA^}5d=`kvi={^)hl zRxdNZPm>N^n*RiRZTX-5GYtJxJMB}S`nS^el3#pO{YY?K3EkM>*m=07yz<6Cw{=1oR zT_fwqzM^eD@pIRo>zB>XSnXT7^p?Hf)IMzbgEcWxY=_+n+-q^w`B zo-}vp>$OA2raheWrwfZ$J#gtp=l+~`go)ci^2VnYJoU=rz0RlWp8xI3M;^{G{rP8) zpzR(>b~em=zUb#&Z(A?VN`Bvc+nvA7ubDcj!gcELgR3uRJd?cgKjOCEu;>?)R>XWi z=i{Aw{C_<+#gW{!^Z3T%^5eVh|FZYqR@Y8(X3OA~zXUZ5`@_VN4X+QoYxUO12R=LY zSaHPBkS#0M2Us$$E4^2^qhMiO>@Caces$)p<@XF!_I;-9_tB3x^_Rh~jyZVU`1;i?Oa40V#^=who>#xN#r?_mb$31`-Zkd*we@QbJiGj}ov{O} zK6>)C$~iYRB`utpX!(tMN!gaiH=QZH?~Up&Yt#Lo{?_;OvC_eJ?_8NSb=rl8zuLO_ zmIII7wBy$BHv+~UTIr9T_})zQVBPoEoH=lEKfXUD6F5Y|i<~z@C|Mm}yla|>^#yehlud!-!OTg^S!ynGxoslB!&3?9^ z!TYBb2Nz6TA3VJ-<;WizhkgG2w204F1;^eqr#k%7HRG54dQntD`22MRx4wI%X4r=M z>uWw~I5g@P3#?Pqx86P0_2lHQe%HKe+#9=ho?7kNY>yoH=lzFg<^SsF7We7&XFj~Q z@`Jmc%s>6a+?yA+e*RX?`X#?Fxp4pYZ*@o;^A~0gP0lSlB-yGiZe6_mpv5|Tw*6d1 zoz@CACd;zV%n$I^Y>{V3G8X(~Iv;{9tU_zn{G^uky%KH3y^j>rl)Kamj~|hOFFvwm@z904!t#~CsOU%k zMn8Hp7yYq)i@6SeqVMS2PC#lu`hNTgIM;XmK%Bbt@5lWH_Ty(TGK0SA2Y=d+{!HI` ztF<3}KlZJc`mR49vTyyM*ZS7m4E0aOd;NyK>tEBK{!l;l`{8{3M}5~H+K>Mc)BCPJ zte-d;wyy8`!~3Z}BC7BDk^Sil`mR4RrEk5V<^OX6oB$`l32*|O04Kl+Z~~kFC%_4C z0-OLRzzJ{yoB$`l32*|O04Kl+Z~~kFC%_4C0-OLRzzJ{yoB$`l32*|O04Kl+Z~~kF zC%_4C0-OLRzzJ{yoB$`l32*|O04Kl+Z~~kFC%_4C0-OLRzzJ{yoB$`l32*|O04Kl+ zZ~~kFC%_4C0-OLRzzJ{yoB$`l32*|O04Kl+Z~~kFC%_4C0-OLRzzJ{yoB$`l32*|O z04Kl+Z~~kFC%_4C0-OLRzzJ{yoB$`l32*|O04Kl+Z~~kFC%_4C0-OLRzzJ{yoB$`l z32*|O04Kl+Z~~kFC%_4C0-OLRzzJ{yoB$`l32*|O04Kl+Z~~kFC%_4C0-OLRzzJ{y zoB$`l32*|O04Kl+Z~~kFC%_4C0-OLRzzJ{yoB$`l32*|O04Kl+Z~~kFC%_4C0-OLR xzzJ{yoB$`l32*|O04Kl+Z~~kFC%_4C0-OLRzzJ{yoB$`l32*|O!2b$?{{;Exh_V0x literal 0 HcmV?d00001 diff --git a/external/mambo/README.md b/external/mambo/README.md index 0390cc0ab5b0..2196a2c3a6c6 100644 --- a/external/mambo/README.md +++ b/external/mambo/README.md @@ -53,6 +53,17 @@ export SKIBOOT=$HOME/src/skiboot/skiboot.lid export SKIBOOT_AUTORUN=1 ``` +### Using Real Container Verification Code for Secure Boot + +The CVC code dump is from a real machine, and the code is from the Hostboot +project (see src/securerom). We just include the dump here for testing +purposes. + +``` +export SKIBOOT_CVC_CODE=$HOME/src/skiboot/external/mambo/CVC +export SKIBOOT_ENABLE_MAMBO_STB=1 +``` + ### Run the simulator ``` /opt/ibm/systemsim-p8/run/pegasus/power8 -f $HOME/src/skiboot/external/mambo/skiboot.tcl