diff options
| author | Nayna Jain <[email protected]> | 2019-11-05 17:02:07 -0600 |
|---|---|---|
| committer | Michael Ellerman <[email protected]> | 2019-11-12 12:25:49 +1100 |
| commit | 2702809a4a1ab414d75c00936cda70ea77c8234e (patch) | |
| tree | 73a331f2f9de6ec65b20fba05d78e1deb5183a32 /arch/powerpc/include/asm/secure_boot.h | |
| parent | 4238fad366a660cbc6499ca1ea4be42bd4d1ac5b (diff) | |
powerpc: Detect the trusted boot state of the system
While secure boot permits only properly verified signed kernels to be
booted, trusted boot calculates the file hash of the kernel image and
stores the measurement prior to boot, that can be subsequently
compared against good known values via attestation services.
This patch reads the trusted boot state of a PowerNV system. The state
is used to conditionally enable additional measurement rules in the
IMA arch-specific policies.
Signed-off-by: Nayna Jain <[email protected]>
Signed-off-by: Eric Richter <[email protected]>
Signed-off-by: Michael Ellerman <[email protected]>
Link: https://lore.kernel.org/r/[email protected]
Diffstat (limited to 'arch/powerpc/include/asm/secure_boot.h')
| -rw-r--r-- | arch/powerpc/include/asm/secure_boot.h | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/arch/powerpc/include/asm/secure_boot.h b/arch/powerpc/include/asm/secure_boot.h index 07d0fe0ca81f..a2ff556916c6 100644 --- a/arch/powerpc/include/asm/secure_boot.h +++ b/arch/powerpc/include/asm/secure_boot.h @@ -11,6 +11,7 @@ #ifdef CONFIG_PPC_SECURE_BOOT bool is_ppc_secureboot_enabled(void); +bool is_ppc_trustedboot_enabled(void); #else @@ -19,5 +20,10 @@ static inline bool is_ppc_secureboot_enabled(void) return false; } +static inline bool is_ppc_trustedboot_enabled(void) +{ + return false; +} + #endif #endif |