Searched hist:"2702809 a4a1ab414d75c00936cda70ea77c8234e" (Results 1 – 2 of 2) sorted by relevance
| /openbmc/linux/arch/powerpc/include/asm/ |
| H A D | secure_boot.h | diff 2702809a4a1ab414d75c00936cda70ea77c8234e Tue Nov 05 17:02:07 CST 2019 Nayna Jain <nayna@linux.ibm.com> powerpc: Detect the trusted boot state of the system
While secure boot permits only properly verified signed kernels to be
booted, trusted boot calculates the file hash of the kernel image and
stores the measurement prior to boot, that can be subsequently
compared against good known values via attestation services.
This patch reads the trusted boot state of a PowerNV system. The state
is used to conditionally enable additional measurement rules in the
IMA arch-specific policies.
Signed-off-by: Nayna Jain <nayna@linux.ibm.com>
Signed-off-by: Eric Richter <erichte@linux.ibm.com>
Signed-off-by: Michael Ellerman <mpe@ellerman.id.au>
Link: https://lore.kernel.org/r/e9eeee6b-b9bf-1e41-2954-61dbd6fbfbcf@linux.ibm.com
|
| /openbmc/linux/arch/powerpc/kernel/ |
| H A D | secure_boot.c | diff 2702809a4a1ab414d75c00936cda70ea77c8234e Tue Nov 05 17:02:07 CST 2019 Nayna Jain <nayna@linux.ibm.com> powerpc: Detect the trusted boot state of the system
While secure boot permits only properly verified signed kernels to be
booted, trusted boot calculates the file hash of the kernel image and
stores the measurement prior to boot, that can be subsequently
compared against good known values via attestation services.
This patch reads the trusted boot state of a PowerNV system. The state
is used to conditionally enable additional measurement rules in the
IMA arch-specific policies.
Signed-off-by: Nayna Jain <nayna@linux.ibm.com>
Signed-off-by: Eric Richter <erichte@linux.ibm.com>
Signed-off-by: Michael Ellerman <mpe@ellerman.id.au>
Link: https://lore.kernel.org/r/e9eeee6b-b9bf-1e41-2954-61dbd6fbfbcf@linux.ibm.com
|