[Skiboot] [PATCH v6 0/5] Add Secure Variable Support

Eric Richter erichte at linux.ibm.com
Tue Nov 5 15:20:06 AEDT 2019


This version of the set further revises the device tree nodes and
properties for secure variables. As before, this is a trimmed set to
only include the base requirements.

Changes in V6:
 - moved os-secureboot-enforcing to ibm,secureboot
 - removed backend node from secvar node
 - set secvar compatible based on the backend in use
 - updated documentation for the above
 - added a generic compatible to ibm,secureboot

Changes in V5:
 - rewrote the device tree bindings document
 - removed storage child of secvar node
 - adjusted the code to use new device tree layout
 - removed unused, or old code that is no longer needed

Eric Richter (4):
  doc: add opal secure variable documentation
  libstb/secvar: add secure variable internal abstraction
  libstb/secvar: add secvar api implementation
  secvar/test: add rudimentary secvar API unit testing

Oliver O'Halloran (1):
  hdata: Add a generic compatible to ibm,secureboot

 ccan/list/list.h                            |  38 ++++
 core/init.c                                 |   4 +
 doc/device-tree/ibm,opal/secvar/binding.rst | 203 ++++++++++++++++++++
 doc/device-tree/ibm,secureboot.rst          |   5 +
 doc/opal-api/opal-secvar.rst                | 192 ++++++++++++++++++
 hdata/spira.c                               |   3 +-
 hdata/test/op920.wsp.dts                    |   2 +-
 include/opal-api.h                          |   5 +-
 include/platform.h                          |   2 +
 include/secvar.h                            |  29 +++
 libstb/Makefile.inc                         |   3 +-
 libstb/secvar/Makefile.inc                  |  15 ++
 libstb/secvar/backend/Makefile.inc          |  11 ++
 libstb/secvar/secvar.h                      |  55 ++++++
 libstb/secvar/secvar_api.c                  | 158 +++++++++++++++
 libstb/secvar/secvar_devtree.c              |  66 +++++++
 libstb/secvar/secvar_devtree.h              |  10 +
 libstb/secvar/secvar_main.c                 |  87 +++++++++
 libstb/secvar/secvar_util.c                 | 105 ++++++++++
 libstb/secvar/storage/Makefile.inc          |  11 ++
 libstb/secvar/test/Makefile.check           |  46 +++++
 libstb/secvar/test/secvar-test-enqueue.c    | 160 +++++++++++++++
 libstb/secvar/test/secvar-test-getvar.c     | 112 +++++++++++
 libstb/secvar/test/secvar-test-nextvar.c    | 132 +++++++++++++
 libstb/secvar/test/secvar-test-void.c       |  24 +++
 libstb/secvar/test/secvar_api_test.c        |  92 +++++++++
 libstb/secvar/test/secvar_common_test.c     |  64 ++++++
 27 files changed, 1630 insertions(+), 4 deletions(-)
 create mode 100644 doc/device-tree/ibm,opal/secvar/binding.rst
 create mode 100644 doc/opal-api/opal-secvar.rst
 create mode 100644 include/secvar.h
 create mode 100644 libstb/secvar/Makefile.inc
 create mode 100644 libstb/secvar/backend/Makefile.inc
 create mode 100644 libstb/secvar/secvar.h
 create mode 100644 libstb/secvar/secvar_api.c
 create mode 100644 libstb/secvar/secvar_devtree.c
 create mode 100644 libstb/secvar/secvar_devtree.h
 create mode 100644 libstb/secvar/secvar_main.c
 create mode 100644 libstb/secvar/secvar_util.c
 create mode 100644 libstb/secvar/storage/Makefile.inc
 create mode 100644 libstb/secvar/test/Makefile.check
 create mode 100644 libstb/secvar/test/secvar-test-enqueue.c
 create mode 100644 libstb/secvar/test/secvar-test-getvar.c
 create mode 100644 libstb/secvar/test/secvar-test-nextvar.c
 create mode 100644 libstb/secvar/test/secvar-test-void.c
 create mode 100644 libstb/secvar/test/secvar_api_test.c
 create mode 100644 libstb/secvar/test/secvar_common_test.c

-- 
2.21.0



More information about the Skiboot mailing list