xref: /openbmc/linux/drivers/platform/x86/hp/hp-bioscfg/passwdobj-attributes.c (revision 8646a3b5ee3a5b384a22a721f37c24274d974045)
1 // SPDX-License-Identifier: GPL-2.0
2 /*
3  * Functions corresponding to password object type attributes under
4  * BIOS PASSWORD for use with hp-bioscfg driver.
5  *
6  * Copyright (c) 2022 HP Development Company, L.P.
7  */
8 
9 #include "bioscfg.h"
10 #include <asm-generic/posix_types.h>
11 
12 GET_INSTANCE_ID(password);
13 /*
14  * Clear all passwords copied to memory for a particular
15  * authentication instance
16  */
17 static int clear_passwords(const int instance)
18 {
19 	struct password_data *password_data = &bioscfg_drv.password_data[instance];
20 
21 	if (!password_data->is_enabled)
22 		return 0;
23 
24 	memset(password_data->current_password,
25 	       0, sizeof(password_data->current_password));
26 	memset(password_data->new_password,
27 	       0, sizeof(password_data->new_password));
28 
29 	return 0;
30 }
31 
32 /*
33  * Clear all credentials copied to memory for both Power-ON and Setup
34  * BIOS instances
35  */
36 int hp_clear_all_credentials(void)
37 {
38 	int count = bioscfg_drv.password_instances_count;
39 	int instance;
40 
41 	/* clear all passwords */
42 	for (instance = 0; instance < count; instance++)
43 		clear_passwords(instance);
44 
45 	/* clear auth_token */
46 	kfree(bioscfg_drv.spm_data.auth_token);
47 	bioscfg_drv.spm_data.auth_token = NULL;
48 
49 	return 0;
50 }
51 
52 int hp_get_password_instance_for_type(const char *name)
53 {
54 	int count = bioscfg_drv.password_instances_count;
55 	int instance;
56 
57 	for (instance = 0; instance < count; instance++)
58 		if (!strcmp(bioscfg_drv.password_data[instance].common.display_name, name))
59 			return instance;
60 
61 	return -EINVAL;
62 }
63 
64 static int validate_password_input(int instance_id, const char *buf)
65 {
66 	int length;
67 	struct password_data *password_data = &bioscfg_drv.password_data[instance_id];
68 
69 	length = strlen(buf);
70 	if (buf[length - 1] == '\n')
71 		length--;
72 
73 	if (length > MAX_PASSWD_SIZE)
74 		return INVALID_BIOS_AUTH;
75 
76 	if (password_data->min_password_length > length ||
77 	    password_data->max_password_length < length)
78 		return INVALID_BIOS_AUTH;
79 	return SUCCESS;
80 }
81 
82 ATTRIBUTE_N_PROPERTY_SHOW(is_enabled, password);
83 static struct kobj_attribute password_is_password_set = __ATTR_RO(is_enabled);
84 
85 static int store_password_instance(struct kobject *kobj, const char *buf,
86 				   size_t count, bool is_current)
87 {
88 	char *buf_cp;
89 	int id, ret = 0;
90 
91 	buf_cp = kstrdup(buf, GFP_KERNEL);
92 	if (!buf_cp)
93 		return -ENOMEM;
94 
95 	ret = hp_enforce_single_line_input(buf_cp, count);
96 	if (!ret) {
97 		id = get_password_instance_id(kobj);
98 
99 		if (id >= 0)
100 			ret = validate_password_input(id, buf_cp);
101 	}
102 
103 	if (!ret) {
104 		if (is_current)
105 			strscpy(bioscfg_drv.password_data[id].current_password,
106 				buf_cp,
107 				sizeof(bioscfg_drv.password_data[id].current_password));
108 		else
109 			strscpy(bioscfg_drv.password_data[id].new_password,
110 				buf_cp,
111 				sizeof(bioscfg_drv.password_data[id].new_password));
112 	}
113 
114 	kfree(buf_cp);
115 	return ret < 0 ? ret : count;
116 }
117 
118 static ssize_t current_password_store(struct kobject *kobj,
119 				      struct kobj_attribute *attr,
120 				      const char *buf, size_t count)
121 {
122 	return store_password_instance(kobj, buf, count, true);
123 }
124 
125 static struct kobj_attribute password_current_password = __ATTR_WO(current_password);
126 
127 static ssize_t new_password_store(struct kobject *kobj,
128 				  struct kobj_attribute *attr,
129 				  const char *buf, size_t count)
130 {
131 	return store_password_instance(kobj, buf, count, true);
132 }
133 
134 static struct kobj_attribute password_new_password = __ATTR_WO(new_password);
135 
136 ATTRIBUTE_N_PROPERTY_SHOW(min_password_length, password);
137 static struct kobj_attribute password_min_password_length = __ATTR_RO(min_password_length);
138 
139 ATTRIBUTE_N_PROPERTY_SHOW(max_password_length, password);
140 static struct kobj_attribute password_max_password_length = __ATTR_RO(max_password_length);
141 
142 static ssize_t role_show(struct kobject *kobj, struct kobj_attribute *attr, char *buf)
143 {
144 	if (!strcmp(kobj->name, SETUP_PASSWD))
145 		return sysfs_emit(buf, "%s\n", BIOS_ADMIN);
146 
147 	if (!strcmp(kobj->name, POWER_ON_PASSWD))
148 		return sysfs_emit(buf, "%s\n", POWER_ON);
149 
150 	return -EIO;
151 }
152 
153 static struct kobj_attribute password_role = __ATTR_RO(role);
154 
155 static ssize_t mechanism_show(struct kobject *kobj, struct kobj_attribute *attr,
156 			      char *buf)
157 {
158 	int i = get_password_instance_id(kobj);
159 
160 	if (i < 0)
161 		return i;
162 
163 	if (bioscfg_drv.password_data[i].mechanism != PASSWORD)
164 		return -EINVAL;
165 
166 	return sysfs_emit(buf, "%s\n", PASSWD_MECHANISM_TYPES);
167 }
168 
169 static struct kobj_attribute password_mechanism = __ATTR_RO(mechanism);
170 
171 ATTRIBUTE_VALUES_PROPERTY_SHOW(encodings, password, SEMICOLON_SEP);
172 static struct kobj_attribute password_encodings_val = __ATTR_RO(encodings);
173 
174 static struct attribute *password_attrs[] = {
175 	&password_is_password_set.attr,
176 	&password_min_password_length.attr,
177 	&password_max_password_length.attr,
178 	&password_current_password.attr,
179 	&password_new_password.attr,
180 	&password_role.attr,
181 	&password_mechanism.attr,
182 	&password_encodings_val.attr,
183 	NULL
184 };
185 
186 static const struct attribute_group password_attr_group = {
187 	.attrs = password_attrs
188 };
189 
190 int hp_alloc_password_data(void)
191 {
192 	bioscfg_drv.password_instances_count = hp_get_instance_count(HP_WMI_BIOS_PASSWORD_GUID);
193 	bioscfg_drv.password_data = kcalloc(bioscfg_drv.password_instances_count,
194 					    sizeof(*bioscfg_drv.password_data), GFP_KERNEL);
195 	if (!bioscfg_drv.password_data) {
196 		bioscfg_drv.password_instances_count = 0;
197 		return -ENOMEM;
198 	}
199 
200 	return 0;
201 }
202 
203 /* Expected Values types associated with each element */
204 static const acpi_object_type expected_password_types[] = {
205 	[NAME] = ACPI_TYPE_STRING,
206 	[VALUE] = ACPI_TYPE_STRING,
207 	[PATH] = ACPI_TYPE_STRING,
208 	[IS_READONLY] = ACPI_TYPE_INTEGER,
209 	[DISPLAY_IN_UI] = ACPI_TYPE_INTEGER,
210 	[REQUIRES_PHYSICAL_PRESENCE] = ACPI_TYPE_INTEGER,
211 	[SEQUENCE] = ACPI_TYPE_INTEGER,
212 	[PREREQUISITES_SIZE] = ACPI_TYPE_INTEGER,
213 	[PREREQUISITES] = ACPI_TYPE_STRING,
214 	[SECURITY_LEVEL] = ACPI_TYPE_INTEGER,
215 	[PSWD_MIN_LENGTH] = ACPI_TYPE_INTEGER,
216 	[PSWD_MAX_LENGTH] = ACPI_TYPE_INTEGER,
217 	[PSWD_SIZE] = ACPI_TYPE_INTEGER,
218 	[PSWD_ENCODINGS] = ACPI_TYPE_STRING,
219 	[PSWD_IS_SET] = ACPI_TYPE_INTEGER,
220 };
221 
222 static int hp_populate_password_elements_from_package(union acpi_object *password_obj,
223 						      int password_obj_count,
224 						      int instance_id)
225 {
226 	char *str_value = NULL;
227 	int value_len;
228 	int ret;
229 	u32 size;
230 	u32 int_value;
231 	int elem;
232 	int reqs;
233 	int eloc;
234 	int pos_values;
235 	struct password_data *password_data = &bioscfg_drv.password_data[instance_id];
236 
237 	if (!password_obj)
238 		return -EINVAL;
239 
240 	for (elem = 1, eloc = 1; elem < password_obj_count; elem++, eloc++) {
241 		/* ONLY look at the first PASSWORD_ELEM_CNT elements */
242 		if (eloc == PSWD_ELEM_CNT)
243 			goto exit_package;
244 
245 		switch (password_obj[elem].type) {
246 		case ACPI_TYPE_STRING:
247 			if (PREREQUISITES != elem && PSWD_ENCODINGS != elem) {
248 				ret = hp_convert_hexstr_to_str(password_obj[elem].string.pointer,
249 							       password_obj[elem].string.length,
250 							       &str_value, &value_len);
251 				if (ret)
252 					continue;
253 			}
254 			break;
255 		case ACPI_TYPE_INTEGER:
256 			int_value = (u32)password_obj[elem].integer.value;
257 			break;
258 		default:
259 			pr_warn("Unsupported object type [%d]\n", password_obj[elem].type);
260 			continue;
261 		}
262 
263 		/* Check that both expected and read object type match */
264 		if (expected_password_types[eloc] != password_obj[elem].type) {
265 			pr_err("Error expected type %d for elem %d, but got type %d instead\n",
266 			       expected_password_types[eloc], elem, password_obj[elem].type);
267 			return -EIO;
268 		}
269 
270 		/* Assign appropriate element value to corresponding field*/
271 		switch (eloc) {
272 		case VALUE:
273 			break;
274 		case PATH:
275 			strscpy(password_data->common.path, str_value,
276 				sizeof(password_data->common.path));
277 			break;
278 		case IS_READONLY:
279 			password_data->common.is_readonly = int_value;
280 			break;
281 		case DISPLAY_IN_UI:
282 			password_data->common.display_in_ui = int_value;
283 			break;
284 		case REQUIRES_PHYSICAL_PRESENCE:
285 			password_data->common.requires_physical_presence = int_value;
286 			break;
287 		case SEQUENCE:
288 			password_data->common.sequence = int_value;
289 			break;
290 		case PREREQUISITES_SIZE:
291 			password_data->common.prerequisites_size = int_value;
292 			if (int_value > MAX_PREREQUISITES_SIZE)
293 				pr_warn("Prerequisites size value exceeded the maximum number of elements supported or data may be malformed\n");
294 
295 			/* This HACK is needed to keep the expected
296 			 * element list pointing to the right obj[elem].type
297 			 * when the size is zero. PREREQUISITES
298 			 * object is omitted by BIOS when the size is
299 			 * zero.
300 			 */
301 			if (int_value == 0)
302 				eloc++;
303 			break;
304 		case PREREQUISITES:
305 			size = min_t(u32, password_data->common.prerequisites_size,
306 				     MAX_PREREQUISITES_SIZE);
307 
308 			for (reqs = 0; reqs < size; reqs++) {
309 				ret = hp_convert_hexstr_to_str(password_obj[elem + reqs].string.pointer,
310 							       password_obj[elem + reqs].string.length,
311 							       &str_value, &value_len);
312 
313 				if (ret)
314 					break;
315 
316 				strscpy(password_data->common.prerequisites[reqs],
317 					str_value,
318 					sizeof(password_data->common.prerequisites[reqs]));
319 
320 				kfree(str_value);
321 			}
322 			break;
323 		case SECURITY_LEVEL:
324 			password_data->common.security_level = int_value;
325 			break;
326 		case PSWD_MIN_LENGTH:
327 			password_data->min_password_length = int_value;
328 			break;
329 		case PSWD_MAX_LENGTH:
330 			password_data->max_password_length = int_value;
331 			break;
332 		case PSWD_SIZE:
333 			password_data->encodings_size = int_value;
334 			if (int_value > MAX_ENCODINGS_SIZE)
335 				pr_warn("Password Encoding size value exceeded the maximum number of elements supported or data may be malformed\n");
336 
337 			/* This HACK is needed to keep the expected
338 			 * element list pointing to the right obj[elem].type
339 			 * when the size is zero. PSWD_ENCODINGS
340 			 * object is omitted by BIOS when the size is
341 			 * zero.
342 			 */
343 			if (int_value == 0)
344 				eloc++;
345 			break;
346 		case PSWD_ENCODINGS:
347 			size = min_t(u32, password_data->encodings_size, MAX_ENCODINGS_SIZE);
348 			for (pos_values = 0; pos_values < size; pos_values++) {
349 				ret = hp_convert_hexstr_to_str(password_obj[elem + pos_values].string.pointer,
350 							       password_obj[elem + pos_values].string.length,
351 							       &str_value, &value_len);
352 				if (ret)
353 					break;
354 
355 				strscpy(password_data->encodings[pos_values],
356 					str_value,
357 					sizeof(password_data->encodings[pos_values]));
358 				kfree(str_value);
359 			}
360 			break;
361 		case PSWD_IS_SET:
362 			password_data->is_enabled = int_value;
363 			break;
364 		default:
365 			pr_warn("Invalid element: %d found in Password attribute or data may be malformed\n", elem);
366 			break;
367 		}
368 	}
369 
370 exit_package:
371 	kfree(str_value);
372 	return 0;
373 }
374 
375 /**
376  * hp_populate_password_package_data()
377  *	Populate all properties for an instance under password attribute
378  *
379  * @password_obj: ACPI object with password data
380  * @instance_id: The instance to enumerate
381  * @attr_name_kobj: The parent kernel object
382  */
383 int hp_populate_password_package_data(union acpi_object *password_obj, int instance_id,
384 				      struct kobject *attr_name_kobj)
385 {
386 	struct password_data *password_data = &bioscfg_drv.password_data[instance_id];
387 
388 	password_data->attr_name_kobj = attr_name_kobj;
389 
390 	hp_populate_password_elements_from_package(password_obj,
391 						   password_obj->package.count,
392 						   instance_id);
393 
394 	hp_friendly_user_name_update(password_data->common.path,
395 				     attr_name_kobj->name,
396 				     password_data->common.display_name,
397 				     sizeof(password_data->common.display_name));
398 
399 	if (!strcmp(attr_name_kobj->name, SETUP_PASSWD))
400 		return sysfs_create_group(attr_name_kobj, &password_attr_group);
401 
402 	return sysfs_create_group(attr_name_kobj, &password_attr_group);
403 }
404 
405 static int hp_populate_password_elements_from_buffer(u8 *buffer_ptr, u32 *buffer_size,
406 						     int instance_id)
407 {
408 	int values;
409 	int isreadonly;
410 	struct password_data *password_data = &bioscfg_drv.password_data[instance_id];
411 	int ret = 0;
412 
413 	/*
414 	 * Only data relevant to this driver and its functionality is
415 	 * read. BIOS defines the order in which each * element is
416 	 * read. Element 0 data is not relevant to this
417 	 * driver hence it is ignored. For clarity, all element names
418 	 * (DISPLAY_IN_UI) which defines the order in which is read
419 	 * and the name matches the variable where the data is stored.
420 	 *
421 	 * In earlier implementation, reported errors were ignored
422 	 * causing the data to remain uninitialized. It is not
423 	 * possible to determine if data read from BIOS is valid or
424 	 * not. It is for this reason functions may return a error
425 	 * without validating the data itself.
426 	 */
427 
428 	// VALUE:
429 	ret = hp_get_string_from_buffer(&buffer_ptr, buffer_size, password_data->current_password,
430 					sizeof(password_data->current_password));
431 	if (ret < 0)
432 		goto buffer_exit;
433 
434 	// COMMON:
435 	ret = hp_get_common_data_from_buffer(&buffer_ptr, buffer_size,
436 					     &password_data->common);
437 	if (ret < 0)
438 		goto buffer_exit;
439 
440 	// PSWD_MIN_LENGTH:
441 	ret = hp_get_integer_from_buffer(&buffer_ptr, buffer_size,
442 					 &password_data->min_password_length);
443 	if (ret < 0)
444 		goto buffer_exit;
445 
446 	// PSWD_MAX_LENGTH:
447 	ret = hp_get_integer_from_buffer(&buffer_ptr, buffer_size,
448 					 &password_data->max_password_length);
449 	if (ret < 0)
450 		goto buffer_exit;
451 
452 	// PSWD_SIZE:
453 	ret = hp_get_integer_from_buffer(&buffer_ptr, buffer_size,
454 					 &password_data->encodings_size);
455 	if (ret < 0)
456 		goto buffer_exit;
457 
458 	if (password_data->encodings_size > MAX_ENCODINGS_SIZE) {
459 		/* Report a message and limit possible values size to maximum value */
460 		pr_warn("Password Encoding size value exceeded the maximum number of elements supported or data may be malformed\n");
461 		password_data->encodings_size = MAX_ENCODINGS_SIZE;
462 	}
463 
464 	// PSWD_ENCODINGS:
465 	for (values = 0; values < password_data->encodings_size; values++) {
466 		ret = hp_get_string_from_buffer(&buffer_ptr, buffer_size,
467 						password_data->encodings[values],
468 						sizeof(password_data->encodings[values]));
469 		if (ret < 0)
470 			break;
471 	}
472 
473 	// PSWD_IS_SET:
474 	ret = hp_get_integer_from_buffer(&buffer_ptr, buffer_size, &isreadonly);
475 	if (ret < 0)
476 		goto buffer_exit;
477 
478 	password_data->is_enabled = isreadonly ? true : false;
479 
480 buffer_exit:
481 	return ret;
482 }
483 
484 /**
485  * hp_populate_password_buffer_data()
486  * Populate all properties for an instance under password object attribute
487  *
488  * @buffer_ptr: Buffer pointer
489  * @buffer_size: Buffer size
490  * @instance_id: The instance to enumerate
491  * @attr_name_kobj: The parent kernel object
492  */
493 int hp_populate_password_buffer_data(u8 *buffer_ptr, u32 *buffer_size, int instance_id,
494 				     struct kobject *attr_name_kobj)
495 {
496 	struct password_data *password_data = &bioscfg_drv.password_data[instance_id];
497 	int ret = 0;
498 
499 	password_data->attr_name_kobj = attr_name_kobj;
500 
501 	/* Populate Password attributes */
502 	ret = hp_populate_password_elements_from_buffer(buffer_ptr, buffer_size,
503 							instance_id);
504 	if (ret < 0)
505 		return ret;
506 
507 	hp_friendly_user_name_update(password_data->common.path,
508 				     attr_name_kobj->name,
509 				     password_data->common.display_name,
510 				     sizeof(password_data->common.display_name));
511 	if (!strcmp(attr_name_kobj->name, SETUP_PASSWD))
512 		return sysfs_create_group(attr_name_kobj, &password_attr_group);
513 
514 	return sysfs_create_group(attr_name_kobj, &password_attr_group);
515 }
516 
517 /**
518  * hp_exit_password_attributes() - Clear all attribute data
519  *
520  * Clears all data allocated for this group of attributes
521  */
522 void hp_exit_password_attributes(void)
523 {
524 	int instance_id;
525 
526 	for (instance_id = 0; instance_id < bioscfg_drv.password_instances_count;
527 	     instance_id++) {
528 		struct kobject *attr_name_kobj =
529 			bioscfg_drv.password_data[instance_id].attr_name_kobj;
530 
531 		if (attr_name_kobj) {
532 			if (!strcmp(attr_name_kobj->name, SETUP_PASSWD))
533 				sysfs_remove_group(attr_name_kobj,
534 						   &password_attr_group);
535 			else
536 				sysfs_remove_group(attr_name_kobj,
537 						   &password_attr_group);
538 		}
539 	}
540 	bioscfg_drv.password_instances_count = 0;
541 	kfree(bioscfg_drv.password_data);
542 	bioscfg_drv.password_data = NULL;
543 }
544