diff options
Diffstat (limited to 'src/include/usr/secureboot')
| -rw-r--r-- | src/include/usr/secureboot/header.H | 4 | ||||
| -rw-r--r-- | src/include/usr/secureboot/secure_reasoncodes.H | 1 | ||||
| -rw-r--r-- | src/include/usr/secureboot/service.H | 7 | ||||
| -rw-r--r-- | src/include/usr/secureboot/settings.H | 11 |
4 files changed, 20 insertions, 3 deletions
diff --git a/src/include/usr/secureboot/header.H b/src/include/usr/secureboot/header.H index 34300ba9a..0478fa675 100644 --- a/src/include/usr/secureboot/header.H +++ b/src/include/usr/secureboot/header.H @@ -59,7 +59,7 @@ namespace SECUREBOOT iv_data=NULL; } - // @TODO RTC 168021 Converge to single method of reading + // @TODO RTC 178520 Converge to single method of reading // secure header /** @@ -72,7 +72,7 @@ namespace SECUREBOOT */ void loadSecurely(); - // @TODO RTC 168021 Converge to single method of reading + // @TODO RTC 178520 Converge to single method of reading // secure header /** diff --git a/src/include/usr/secureboot/secure_reasoncodes.H b/src/include/usr/secureboot/secure_reasoncodes.H index 59761275a..98fe38d3c 100644 --- a/src/include/usr/secureboot/secure_reasoncodes.H +++ b/src/include/usr/secureboot/secure_reasoncodes.H @@ -54,6 +54,7 @@ namespace SECUREBOOT RC_ROM_SHA512 = SECURE_COMP_ID | 0x08, RC_SECURE_BAD_TARGET = SECURE_COMP_ID | 0x09, RC_SECURE_BOOT_DISABLED = SECURE_COMP_ID | 0x0A, + RC_SECROM_INVALID = SECURE_COMP_ID | 0x0B, // Reason codes 0xA0 - 0xEF reserved for trustedboot_reasoncodes.H }; diff --git a/src/include/usr/secureboot/service.H b/src/include/usr/secureboot/service.H index 27c35f6d4..0258b5706 100644 --- a/src/include/usr/secureboot/service.H +++ b/src/include/usr/secureboot/service.H @@ -299,6 +299,13 @@ namespace SECUREBOOT */ bool allowAttrOverrides(); + /* Definition in settings.H */ + bool bestEffortPolicy(); + + /* Definition in securerommgr.H */ + bool secureRomValidPolicy(); + + } #endif diff --git a/src/include/usr/secureboot/settings.H b/src/include/usr/secureboot/settings.H index 417e14d96..491c607d3 100644 --- a/src/include/usr/secureboot/settings.H +++ b/src/include/usr/secureboot/settings.H @@ -90,7 +90,8 @@ namespace SECUREBOOT class Settings { public: - Settings() : iv_enabled(false) { _init(); }; + Settings() : iv_enabled(false), + iv_bestEffortPolicy(false) { _init(); }; ~Settings() {}; /** @brief Determine if Secureboot is enabled. */ @@ -135,6 +136,13 @@ namespace SECUREBOOT TARGETING::Target* i_pProc = TARGETING::MASTER_PROCESSOR_CHIP_TARGET_SENTINEL) const; + /** @brief Determines if the Secureboot best effort policy is + * enabled. Uses knowledge of compile config options and + * secure mode enabled + * @return bool - True if enabled, false otherwise + */ + bool getBestEffortPolicy() const; + private: void _init(); @@ -184,6 +192,7 @@ namespace SECUREBOOT /** Cached secure boot enabled value */ bool iv_enabled; + bool iv_bestEffortPolicy; }; } |
