talos-hostboot/src/usr/secureboot/runtime/rt_secureboot.C, branch 05-21-2018

Fix SECUREBOOT runtime interfaces and tests

2017-08-18T14:25:30+00:00

This commit fixes the SECUREBOOT::allowAttrOverrides() function and also allows for more accurate secureboot testing at runtime. Change-Id: Ife86bd3f6311247438dd68a1a191d5de86892512 Reviewed-on: http://ralgit01.raleigh.ibm.com/gerrit1/44635 Tested-by: Jenkins Server Tested-by: Jenkins OP Build CI Reviewed-by: Marshall J. Wilks Reviewed-by: Nicholas E. Bofferding Tested-by: FSP CI Jenkins Tested-by: Jenkins OP HW Reviewed-by: Daniel M. Crowell

Secureboot: Inhibit attribute overrides and sync exposures

2017-08-09T17:47:00+00:00

For Secureboot purposes, we don't consider the FSP a secure source. So this commit inhibts attribute overrides and any sort of attribute syncing from the FSP. Change-Id: I941ab5083d3055bc29237839aaaf4b723a2b0e90 RTC:175071 Reviewed-on: http://ralgit01.raleigh.ibm.com/gerrit1/42687 Reviewed-by: Nicholas E. Bofferding Tested-by: Jenkins Server Tested-by: Jenkins OP Build CI Reviewed-by: Stephen M. Cprek Tested-by: FSP CI Jenkins Tested-by: Jenkins OP HW Reviewed-by: Daniel M. Crowell

Disable Attribute Overrides in Secure Mode

2017-06-07T13:40:09+00:00

This commit disables attribute overrides during the IPL and at Runtime when the system has security enabled. Change-Id: Ia56b11fc1450c8e11be27c90c0de179038273873 RTC: 163094 Reviewed-on: http://ralgit01.raleigh.ibm.com/gerrit1/40735 Tested-by: Jenkins Server Tested-by: FSP CI Jenkins Tested-by: Jenkins OP Build CI Reviewed-by: Nicholas E. Bofferding Reviewed-by: Stephen M. Cprek Reviewed-by: Daniel M. Crowell

Support extending sections to PCRs

2017-02-02T20:06:55+00:00

- Ported p8 secureboot PCR extension code Change-Id: I2bbf6ee6b2980c2fbe32dfb9cad25e9e2aba3285 RTC: 167581 Reviewed-on: http://ralgit01.raleigh.ibm.com/gerrit1/35632 Tested-by: Jenkins Server Tested-by: FSP CI Jenkins Reviewed-by: Marshall J. Wilks Tested-by: Jenkins OP Build CI Reviewed-by: Stephen M. Cprek Reviewed-by: William G. Hoffa

Register verify_container runtime interface

2016-07-07T14:11:39+00:00

- Added verify_container API to runtime interface for secureboot - Added testcase to test API registration - Created common secureboot tracing files Change-Id: If755644ff6507f14fd0463f4accf05301fc91832 RTC: 156119 Reviewed-on: http://ralgit01.raleigh.ibm.com/gerrit1/26104 Tested-by: Jenkins Server Tested-by: FSP CI Jenkins Reviewed-by: Stephen M. Cprek Reviewed-by: Christopher J. Engel Reviewed-by: William G. Hoffa