diff mbox series

[RFC,v2,8/8] libstb/trustedboot: Map UV image measurement to PCR6

Message ID 20190920135823.471-9-grimm@linux.ibm.com
State RFC
Headers show
Series PEF support in skiboot | expand

Checks

Context Check Description
snowpatch_ozlabs/apply_patch warning Failed to apply on branch master (470ffb5f29d741c3bed600f7bb7bf0cbb270e05a)
snowpatch_ozlabs/apply_patch fail Failed to apply to any branch

Commit Message

Ryan Grimm Sept. 20, 2019, 1:58 p.m. UTC 
From: Claudio Carvalho <cclaudio@linux.ibm.com>

This maps the ultravisor image to be measured to PCR6. The image is
automatically verified and  measured hen it is loaded from PNOR.

Signed-off-by: Claudio Carvalho <cclaudio@linux.ibm.com>
---
 libstb/trustedboot.c | 1 +
 1 file changed, 1 insertion(+)

Comments

Oliver O'Halloran Nov. 18, 2019, midnight UTC | #1 
On Sat, Sep 21, 2019 at 12:04 AM Ryan Grimm <grimm@linux.ibm.com> wrote:
>
> From: Claudio Carvalho <cclaudio@linux.ibm.com>
>
> This maps the ultravisor image to be measured to PCR6. The image is
> automatically verified and  measured hen it is loaded from PNOR.
>
> Signed-off-by: Claudio Carvalho <cclaudio@linux.ibm.com>
> ---
>  libstb/trustedboot.c | 1 +
>  1 file changed, 1 insertion(+)
>
> diff --git a/libstb/trustedboot.c b/libstb/trustedboot.c
> index 3f977de1..23b671b1 100644
> --- a/libstb/trustedboot.c
> +++ b/libstb/trustedboot.c
> @@ -45,6 +45,7 @@ static struct {
>         { RESOURCE_ID_KERNEL,           PCR_4},
>         { RESOURCE_ID_CAPP,             PCR_4},
>         { RESOURCE_ID_VERSION,          PCR_4}, /* Also data for Hostboot */
> +       { RESOURCE_ID_UV_IMAGE,         PCR_6},

I think there was some discussion recently about whether PCR4 should
be used, so is this correct?

>  };
>
>  /*
> --
> 2.21.0
>
> _______________________________________________
> Skiboot mailing list
> Skiboot@lists.ozlabs.org
> https://lists.ozlabs.org/listinfo/skiboot
diff mbox series

Patch

diff --git a/libstb/trustedboot.c b/libstb/trustedboot.c
index 3f977de1..23b671b1 100644
--- a/libstb/trustedboot.c
+++ b/libstb/trustedboot.c
@@ -45,6 +45,7 @@  static struct {
 	{ RESOURCE_ID_KERNEL,		PCR_4},
 	{ RESOURCE_ID_CAPP,		PCR_4},
 	{ RESOURCE_ID_VERSION,		PCR_4}, /* Also data for Hostboot */
+	{ RESOURCE_ID_UV_IMAGE,		PCR_6},
 };
 
 /*