Skip to content

efi/libstub: Fall back to CC proto for measurement

Ard Biesheuvel linux-efi stable 3 versions – In review

Get series with b4
b4 am [email protected]

Versions newest first · linked by author and title

  1. v3 Latest5 patches 4 repliesIn review
  2. v25 patches 3 repliesSuperseded
  3. v14 patches 16 repliesSuperseded

Changes since v1 from the cover letter

- add patch to switch to the TCG2 spec's symbolic GUID name for the final events table
- omit flex array member in efi_cc_event_t
- avoid version confusion between CC and TCG2 both using version 2

Patches in v3 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/5efi/libstub: Use correct event size when measuring data into the TPMdrivers/firmware/efi/libstub/efi-stub-helper.c drivers/firmware/efi/libstub/efistub.h+17 -154 replies
2/5efi/tpm: Use symbolic GUID name from spec for final events tabledrivers/firmware/efi/efi.c drivers/firmware/efi/libstub/tpm.c include/linux/efi.h+3 -30 replies
3/5efi/libstub: Add Confidential Computing (CC) measurement typedefsdrivers/firmware/efi/libstub/efistub.h include/linux/efi.h+80 -00 replies
4/5efi/libstub: Measure into CC protocol if TCG2 protocol is absentdrivers/firmware/efi/libstub/efi-stub-helper.c+62 -220 replies
5/5efi/libstub: Add get_event_log() support for CC platformsdrivers/firmware/efi/efi.c drivers/firmware/efi/libstub/efi-stub.c drivers/firmware/efi/libstub/efistub.h +3 more+61 -310 replies

Reviews trailers per patch

2 of 5 patches have a Reviewed-by or Acked-by.

PatchKuppuswamy SathyanarayananIlias Apalodimas
1/5
2/5R-b R-b
3/5
4/5R-b
5/5

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes.

Read the v3 thread

Cover letter [PATCH v3 0/5] efi/libstub: Fall back to CC proto for measurement

From: Ard Biesheuvel <[email protected]>

This is a follow-up to Kuppuswamy's series [0] to add TDX based measurement of the initrd and command line to the EFI stub.

Changes since v2 [1]:
- fix incorrect assertion that efi_tcg2_tagged_event is a local invention; it comes from the TCG PC Client spec
- fix deviation from TCG PC Client spec in how the event size field is populated

Changes since v1:
- add patch to switch to the TCG2 spec's symbolic GUID name for the final events table
- omit flex array member in efi_cc_event_t
- avoid version confusion between CC and TCG2 both using version 2

Cc Kuppuswamy Sathyanarayanan <[email protected]>
Cc Ilias Apalodimas <[email protected]>

[0] https://lore.kernel.org/all/20240215030002.281456-1-sathyanarayanan.kuppuswamy@linux.intel.com/
[1] https://lkml.kernel.org/r/20240307162214.272314-7-ardb%2Bgit%40google.com

Ard Biesheuvel (3):
efi/libstub: Use correct event size when measuring data into the TPM efi/tpm: Use symbolic GUID name from spec for final events table efi/libstub: Measure into CC protocol if TCG2 protocol is absent

Kuppuswamy Sathyanarayanan (2):
efi/libstub: Add Confidential Computing (CC) measurement typedefs efi/libstub: Add get_event_log() support for CC platforms

 drivers/firmware/efi/efi.c                     |  3 +-
 drivers/firmware/efi/libstub/efi-stub-helper.c | 98 ++++++++++++++------
 drivers/firmware/efi/libstub/efi-stub.c        |  2 +-
 drivers/firmware/efi/libstub/efistub.h         | 95 +++++++++++++++++--
 drivers/firmware/efi/libstub/tpm.c             | 82 ++++++++++------
 drivers/firmware/efi/libstub/x86-stub.c        |  2 +-
 include/linux/efi.h                            |  4 +-
 7 files changed, 219 insertions(+), 67 deletions(-)
Signature · 1 line
2.44.0.278.ge034bb2e1d-goog