Test #6245
Draft
Test #6245
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
sunceping
force-pushed
the
test
branch
2 times, most recently
from
9a0cdc1
to
2ae7ade
Compare
Signed-off-by: Min Xu <[email protected]> Signed-off-by: Ceping Sun <[email protected]>
Signed-off-by: Min Xu <[email protected]> Signed-off-by: Ceping Sun <[email protected]>
Signed-off-by: Min Xu <[email protected]> Signed-off-by: Ceping Sun <[email protected]>
Signed-off-by: Min Xu <[email protected]> Signed-off-by: Ceping Sun <[email protected]>
Signed-off-by: Min Xu <[email protected]> Signed-off-by: Ceping Sun <[email protected]>
Signed-off-by: Min Xu <[email protected]> Signed-off-by: Ceping Sun <[email protected]>
Signed-off-by: Min Xu <[email protected]> Signed-off-by: Ceping Sun <[email protected]>
Signed-off-by: Min Xu <[email protected]> Signed-off-by: Ceping Sun <[email protected]>
Signed-off-by: Min Xu <[email protected]> Signed-off-by: Ceping Sun <[email protected]>
Since TDVF have to measure fw_cfg data from QEMU, it is reqiured to cache the data with measurement in early phase, that can avoid changing the measurement order when reading the fw_cfg process, which depends on multipe factors(depex, order in the firmware volume). Cc: Erdem Aktas <[email protected]> Cc: Jiewen Yao <[email protected]> Cc: Min Xu <[email protected]> Cc: Gerd Hoffmann <[email protected]> Cc: Elena Reshetova <[email protected]> Signed-off-by: Ceping Sun <[email protected]>
Since the TdxHelperLib is used for measurement in PEI phase, it required TDVF to add the library. And for other platform, it is null. Cc: Erdem Aktas <[email protected]> Cc: Jiewen Yao <[email protected]> Cc: Min Xu <[email protected]> Cc: Gerd Hoffmann <[email protected]> Cc: Elena Reshetova <[email protected]> Signed-off-by: Ceping Sun <[email protected]>
Signed-off-by: Min Xu <[email protected]> Signed-off-by: Ceping Sun <[email protected]>
OVMF uses FW_CFG_SELECTOR(0x510) and FW_CFG_IO_DATA(0x511) to get configuration infomation from QEMU. From the security perspective these information shall be measured before they're consumed. This patch reads the fw_cfg items and cached them in a GuidHob. In the meanwhile these fw_cfg items are measured as well. This is to avoid changing the order when reading the fw_cfg process, which depends on multiple factors(depex, order in the Firmware volume). Signed-off-by: Min Xu <[email protected]> Signed-off-by: Ceping Sun <[email protected]>
Signed-off-by: Min Xu <[email protected]> Signed-off-by: Ceping Sun <[email protected]>
Signed-off-by: Min Xu <[email protected]> Signed-off-by: Ceping Sun <[email protected]>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Description
<Include a description of the change and why this change was made.>
<For each item, place an "x" in between
[and]if true. Example:[x](you can also check items in GitHub UI)><Create the PR as a Draft PR if it is only created to run CI checks.>
<Delete lines in <> tags before creating the PR.>
How This Was Tested
<Describe the test(s) that were run to verify the changes.>
Integration Instructions
<Describe how these changes should be integrated. Use N/A if nothing is required.>