Messages in this thread | | | From | Daniel Gutson <> | Date | Thu, 3 Sep 2020 13:35:30 -0300 | Subject | Re: [PATCH] Platform integrity information in sysfs |
| |
On Thu, Sep 3, 2020 at 1:27 PM Greg Kroah-Hartman <gregkh@linuxfoundation.org> wrote: > > On Thu, Sep 03, 2020 at 01:18:04PM -0300, Daniel Gutson wrote: > > This patch exports information about the platform integrity > > firmware configuration in the sysfs filesystem. > > In this initial patch, I include some configuration attributes > > for the system SPI chip. > > > > This initial version exports the BIOS Write Enable (bioswe), > > BIOS Lock Enable (ble), and the SMM BIOS Write Protect (SMM_BWP) > > fields of the BIOS Control register. The idea is to keep adding more > > flags, not only from the BC but also from other registers in following > > versions. > > > > The goal is that the attributes are avilable to fwupd when SecureBoot > > is turned on. > > > > The patch provides a new misc driver, as proposed in the previous patch, > > that provides a registration function for HW Driver devices to register > > class_attributes. > > In this case, the intel SPI flash chip (intel-spi) registers three > > class_attributes corresponding to the fields mentioned above. > > > > This version of the patch provides a new API supporting regular > > device attributes rather than custom attributes, and also avoids > > a race condition when exporting the driver sysfs dir and the > > attributes files inside it. > > Also, this patch renames 'platform lockdown' by 'platform integrity'. > > > > Signed-off-by: Daniel Gutson <daniel.gutson@eclypsium.com> > > --- > > Always version your patches, there's no way this is "v1", right?
Sorry, I thought the version was reseted after the title changed.
> > greg k-h
-- Daniel Gutson Argentina Site Director Enginieering Director Eclypsium
Below The Surface: Get the latest threat research and insights on firmware and supply chain threats from the research team at Eclypsium. https://eclypsium.com/research/#threatreport
| |