summaryrefslogtreecommitdiffstats
path: root/src/usr/util
diff options
context:
space:
mode:
authorJaymes Wilks <mjwilks@us.ibm.com>2017-09-13 09:53:39 -0500
committerWilliam G. Hoffa <wghoffa@us.ibm.com>2017-10-20 12:50:04 -0400
commitb70fc1ac984f9da0d9e4932b8a9e40b1ccf4da50 (patch)
tree509a1189bbbb420583dadd61603a08eb6691e2c3 /src/usr/util
parent3f4963bae6821005c0d355587e43ca17512e5a3b (diff)
downloadtalos-hostboot-b70fc1ac984f9da0d9e4932b8a9e40b1ccf4da50.tar.gz
talos-hostboot-b70fc1ac984f9da0d9e4932b8a9e40b1ccf4da50.zip
Implement Secure unload
Implement Secure unload of secure sections within PNOR. Change-Id: I92a00013d23e0506f89f89ec41a193eac0b25d25 RTC:157475 Reviewed-on: http://ralgit01.raleigh.ibm.com/gerrit1/46203 Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP Build CI <op-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP HW <op-hw-jenkins+hostboot@us.ibm.com> Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com> Reviewed-by: Michael Baiocchi <mbaiocch@us.ibm.com> Reviewed-by: Nicholas E. Bofferding <bofferdn@us.ibm.com> Reviewed-by: William G. Hoffa <wghoffa@us.ibm.com>
Diffstat (limited to 'src/usr/util')
-rw-r--r--src/usr/util/utillidmgr.C9
1 files changed, 7 insertions, 2 deletions
diff --git a/src/usr/util/utillidmgr.C b/src/usr/util/utillidmgr.C
index a84f31e88..f8ef376e0 100644
--- a/src/usr/util/utillidmgr.C
+++ b/src/usr/util/utillidmgr.C
@@ -773,8 +773,9 @@ errlHndl_t UtilLidMgr::cleanup()
#ifdef CONFIG_SECUREBOOT
// If in SECUREBOOT the lid could be securely signed in PNOR (like OCC)
// If so, unload it securely
- // NOTE: It is safe to unload it even if it was unloaded before
- if (iv_lidPnorInfo.secure)
+ bool l_doUnload = (iv_lidPnorInfo.size != 0);
+
+ if (iv_lidPnorInfo.secure && l_doUnload)
{
l_err = PNOR::unloadSecureSection(iv_lidPnorInfo.id);
@@ -785,6 +786,10 @@ errlHndl_t UtilLidMgr::cleanup()
"unloading module : %s (id=0x%X)",
iv_lidPnorInfo.id, iv_lidFileName, iv_lidId);
}
+ else
+ {
+ iv_lidPnorInfo.size = 0;
+ }
}
#endif
OpenPOWER on IntegriCloud