[PATCH phosphor-host-ipmid v4] Support for restricted mode for IPMI commands

OpenBMC Patches openbmc-patches at stwcx.xyz
Thu Jun 16 21:40:40 AEST 2016


Only IPMI whitelisted commands are supported in restricted mode.Following commands are restricted in restricted mode.

Blacklisted Commands:
==================

1) Warm Reset  (Netfn: APP, Cmd: 0x02)
2) Set LAN Parameters  (Netfn: STORAGE, Cmd: 0x01)
4)Set ACPI Power State - Currently No Op
5) Wilcard Commands(APP, CHASSIS, SENSOR, STORAGE, TRANSPORT) - Currently No Op

Whitelisted Commands:
==================
===================

[App] Get BT Capabilities (0x36)
[App] Reset Watchdog (0x22)
[App] Set watchdog (0x24)
[App] Get Device GUID
[App] Read Event Message Buffer
[App] Set BMC Global Enables
[App] Get Message Flags
[App] Get Channel Info

[Chassis] Get System Boot Options
[Chassis] Chassis Control
[Chassis] Set System Boot Options

[DCMI] Get Power Limit
[GRP] Group Extn Command

[Sensor/Event] Get Sensor Type (0x2F)
[Sensor/Event] Set Sensor Reading
[Sensor/Event] Get Sensor Reading

[Storage] Get SEL time
[Storage] Set SEL time
[Storage] Get SEL info (0x40)
[Storage] Reserve SEL
[Storage] Add SEL Entry

[Transport] Get LAN parameters

<!-- Reviewable:start -->
---
This change is [<img src="https://reviewable.io/review_button.svg" height="35" align="absmiddle" alt="Reviewable"/>](https://reviewable.io/reviews/openbmc/phosphor-host-ipmid/81)
<!-- Reviewable:end -->


https://github.com/openbmc/phosphor-host-ipmid/pull/81

tomjose (1):
  Whitelist IPMI commands based on Restricted mode

 Makefile    |   3 +-
 ipmid-api.h |   1 +
 ipmid.C     | 118 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++-
 3 files changed, 120 insertions(+), 2 deletions(-)

-- 
2.8.4




More information about the openbmc mailing list