From 073d74fd2227caf1e09f04f77e78a1cc5a1b5ea6 Mon Sep 17 00:00:00 2001
From: Raptor Engineering Development Team <support@raptorengineering.com>
Date: Tue, 18 Feb 2020 01:53:53 +0000
Subject: Add IPMI whitelist to Talos II, but do not activate.

For future development
---
 .../phosphor-ipmi-host/talos-ipmid-whitelist.conf  | 48 ++++++++++++++++++++++
 .../ipmi/phosphor-ipmi-host_%.bbappend             |  6 +++
 2 files changed, 54 insertions(+)
 create mode 100644 meta-rcs/meta-talos/recipes-phosphor/ipmi/phosphor-ipmi-host/talos-ipmid-whitelist.conf

diff --git a/meta-rcs/meta-talos/recipes-phosphor/ipmi/phosphor-ipmi-host/talos-ipmid-whitelist.conf b/meta-rcs/meta-talos/recipes-phosphor/ipmi/phosphor-ipmi-host/talos-ipmid-whitelist.conf
new file mode 100644
index 000000000..961214df0
--- /dev/null
+++ b/meta-rcs/meta-talos/recipes-phosphor/ipmi/phosphor-ipmi-host/talos-ipmid-whitelist.conf
@@ -0,0 +1,48 @@
+#<NetFn>:<Command
+0x00:0x00    //<Chassis>:<Chassis Capabiliti>
+0x00:0x01    //<Chassis>:<Get Chassis Status>
+0x00:0x02    //<Chassis>:<Chassis Control>
+0x00:0x05    //<Chassis>:<Set Chassis Capabilities>
+0x00:0x06    //<Chassis>:<Set Power Restore Policy>
+0x00:0x08    //<Chassis>:<Set System Boot Options>
+0x00:0x09    //<Chassis>:<Get System Boot Options>
+0x00:0x0F    //<Chassis>:<Get POH Counter Command>
+0x04:0x02    //<Sensor/Event>:<Platform event>
+0x04:0x2D    //<Sensor/Event>:<Get Sensor Reading>
+0x04:0x2F    //<Sensor/Event>:<Get Sensor Type>
+0x04:0x30    //<Sensor/Event>:<Set Sensor Reading and Event Status>
+0x06:0x01    //<App>:<Get Device ID>
+0x06:0x04    //<App>:<Get Self Test Results>
+0x06:0x06    //<App>:<Set ACPI Power State>
+0x06:0x07    //<App>:<Get ACPI Power State>
+0x06:0x08    //<App>:<Get Device GUID>
+0x06:0x22    //<App>:<Reset Watchdog Timer>
+0x06:0x24    //<App>:<Set Watchdog Timer>
+0x06:0x25    //<App>:<Get Watchdog Timer>
+0x06:0x2E    //<App>:<Set BMC Global Enables>
+0x06:0x2F    //<App>:<Get BMC Global Enables>
+0x06:0x31    //<App>:<Get Message Flags>
+0x06:0x35    //<App>:<Read Event Message Buffer>
+0x06:0x36    //<App>:<Get BT Interface Capabilities>
+0x06:0x37    //<App>:<Get System GUID>
+0x06:0x42    //<App>:<Get Channel Info Command>
+0x06:0x4E    //<App>:<Get Channel Payload Support>
+0x06:0x54    //<App>:<Get Channel Cipher Suites>
+0x0A:0x10    //<Storage>:<Get FRU Inventory Area Info>
+0x0A:0x11    //<Storage>:<Read FRU Data>
+0x0A:0x20    //<Storage>:<Get SDR Repository Info>
+0x0A:0x22    //<Storage>:<Reserve SDR Repository>
+0x0A:0x23    //<Storage>:<Get SDR>
+0x0A:0x40    //<Storage>:<Get SEL Info>
+0x0A:0x42    //<Storage>:<Reserve SEL>
+0x0A:0x44    //<Storage>:<Add SEL Entry>
+0x0A:0x48    //<Storage>:<Get SEL Time>
+0x0A:0x49    //<Storage>:<Set SEL Time>
+0x0C:0x02    //<Transport>:<Get LAN Configuration Parameters>
+0x2C:0x00    //<Group Extension>:<Group Extension Command>
+0x2C:0x01    //<Group Extension>:<Get DCMI Capabilities>
+0x2C:0x02    //<Group Extension>:<Get Power Reading>
+0x2C:0x03    //<Group Extension>:<Get Power Limit>
+0x2C:0x06    //<Group Extension>:<Get Asset Tag>
+0x2C:0x07    //<Group Extension>:<Get Sensor Info>
+0x2C:0x10    //<Group Extension>:<Get Temperature Readings>
diff --git a/meta-rcs/meta-talos/recipes-phosphor/ipmi/phosphor-ipmi-host_%.bbappend b/meta-rcs/meta-talos/recipes-phosphor/ipmi/phosphor-ipmi-host_%.bbappend
index e1798ad4b..788adb8a2 100644
--- a/meta-rcs/meta-talos/recipes-phosphor/ipmi/phosphor-ipmi-host_%.bbappend
+++ b/meta-rcs/meta-talos/recipes-phosphor/ipmi/phosphor-ipmi-host_%.bbappend
@@ -8,3 +8,9 @@ SRC_URI_append = " \
 EXTRA_OECONF_append = " \
         CHANNEL_YAML_GEN=${WORKDIR}/channel.yaml \
         "
+
+# Replace the default whitelist on Talos II systems
+SRC_URI_append = " file://talos-ipmid-whitelist.conf"
+
+WHITELIST_CONF_remove = " ${S}/host-ipmid-whitelist.conf"
+WHITELIST_CONF_append = " ${WORKDIR}/talos-ipmid-whitelist.conf"
-- 
cgit v1.2.1