mirror of
https://github.com/torvalds/linux.git
synced 2024-11-26 14:12:06 +00:00
50c4decc1b
The PSP sets several pre-defined bits in the capabilities register to indicate that security attributes of the platform. Export these attributes into userspace for administrators to confirm platform is properly locked down. Acked-by: Tom Lendacky <thomas.lendacky@amd.com> Signed-off-by: Mario Limonciello <mario.limonciello@amd.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
83 lines
2.1 KiB
C
83 lines
2.1 KiB
C
/* SPDX-License-Identifier: GPL-2.0-only */
|
|
/*
|
|
* AMD Platform Security Processor (PSP) interface driver
|
|
*
|
|
* Copyright (C) 2017-2019 Advanced Micro Devices, Inc.
|
|
*
|
|
* Author: Brijesh Singh <brijesh.singh@amd.com>
|
|
*/
|
|
|
|
#ifndef __PSP_DEV_H__
|
|
#define __PSP_DEV_H__
|
|
|
|
#include <linux/device.h>
|
|
#include <linux/list.h>
|
|
#include <linux/bits.h>
|
|
#include <linux/interrupt.h>
|
|
|
|
#include "sp-dev.h"
|
|
|
|
#define PSP_CMDRESP_RESP BIT(31)
|
|
#define PSP_CMDRESP_ERR_MASK 0xffff
|
|
|
|
#define MAX_PSP_NAME_LEN 16
|
|
|
|
extern struct psp_device *psp_master;
|
|
|
|
typedef void (*psp_irq_handler_t)(int, void *, unsigned int);
|
|
|
|
struct psp_device {
|
|
struct list_head entry;
|
|
|
|
struct psp_vdata *vdata;
|
|
char name[MAX_PSP_NAME_LEN];
|
|
|
|
struct device *dev;
|
|
struct sp_device *sp;
|
|
|
|
void __iomem *io_regs;
|
|
|
|
psp_irq_handler_t sev_irq_handler;
|
|
void *sev_irq_data;
|
|
|
|
psp_irq_handler_t tee_irq_handler;
|
|
void *tee_irq_data;
|
|
|
|
void *sev_data;
|
|
void *tee_data;
|
|
|
|
unsigned int capability;
|
|
};
|
|
|
|
void psp_set_sev_irq_handler(struct psp_device *psp, psp_irq_handler_t handler,
|
|
void *data);
|
|
void psp_clear_sev_irq_handler(struct psp_device *psp);
|
|
|
|
void psp_set_tee_irq_handler(struct psp_device *psp, psp_irq_handler_t handler,
|
|
void *data);
|
|
void psp_clear_tee_irq_handler(struct psp_device *psp);
|
|
|
|
struct psp_device *psp_get_master_device(void);
|
|
|
|
#define PSP_CAPABILITY_SEV BIT(0)
|
|
#define PSP_CAPABILITY_TEE BIT(1)
|
|
#define PSP_CAPABILITY_PSP_SECURITY_REPORTING BIT(7)
|
|
|
|
#define PSP_CAPABILITY_PSP_SECURITY_OFFSET 8
|
|
/*
|
|
* The PSP doesn't directly store these bits in the capability register
|
|
* but instead copies them from the results of query command.
|
|
*
|
|
* The offsets from the query command are below, and shifted when used.
|
|
*/
|
|
#define PSP_SECURITY_FUSED_PART BIT(0)
|
|
#define PSP_SECURITY_DEBUG_LOCK_ON BIT(2)
|
|
#define PSP_SECURITY_TSME_STATUS BIT(5)
|
|
#define PSP_SECURITY_ANTI_ROLLBACK_STATUS BIT(7)
|
|
#define PSP_SECURITY_RPMC_PRODUCTION_ENABLED BIT(8)
|
|
#define PSP_SECURITY_RPMC_SPIROM_AVAILABLE BIT(9)
|
|
#define PSP_SECURITY_HSP_TPM_AVAILABLE BIT(10)
|
|
#define PSP_SECURITY_ROM_ARMOR_ENFORCED BIT(11)
|
|
|
|
#endif /* __PSP_DEV_H */
|