Something went wrong. Try again.
Linux kernel mirror (for testing) git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Something went wrong. Try again.
12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576// SPDX-License-Identifier: GPL-2.0/* * Copyright (C) 2019 IBM Corporation * Author: Nayna Jain */#include <linux/types.h>#include <linux/of.h>#include <linux/secure_boot.h>#include <linux/string_choices.h>#include <asm/secure_boot.h>
static struct device_node *get_ppc_fw_sb_node(void){ static const struct of_device_id ids[] = { { .compatible = "ibm,secureboot", }, { .compatible = "ibm,secureboot-v1", }, { .compatible = "ibm,secureboot-v2", }, {}, };
return of_find_matching_node(NULL, ids);}
bool is_ppc_secureboot_enabled(void){ struct device_node *node; bool enabled = false; u32 secureboot;
node = get_ppc_fw_sb_node(); enabled = of_property_read_bool(node, "os-secureboot-enforcing"); of_node_put(node);
if (enabled) goto out;
node = of_find_node_by_path("/"); if (!of_property_read_u32(node, "ibm,secure-boot", &secureboot)) enabled = (secureboot > 1); of_node_put(node);
out: pr_info("Secure boot mode %s\n", str_enabled_disabled(enabled));
return enabled;}
bool arch_get_secureboot(void){ return is_ppc_secureboot_enabled();}
bool is_ppc_trustedboot_enabled(void){ struct device_node *node; bool enabled = false; u32 trustedboot;
node = get_ppc_fw_sb_node(); enabled = of_property_read_bool(node, "trusted-enabled"); of_node_put(node);
if (enabled) goto out;
node = of_find_node_by_path("/"); if (!of_property_read_u32(node, "ibm,trusted-boot", &trustedboot)) enabled = (trustedboot > 0); of_node_put(node);
out: pr_info("Trusted boot mode %s\n", str_enabled_disabled(enabled));
return enabled;}