Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S964926AbcKNXsz (ORCPT ); Mon, 14 Nov 2016 18:48:55 -0500 Received: from mga07.intel.com ([134.134.136.100]:62724 "EHLO mga07.intel.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1752354AbcKNXsx (ORCPT ); Mon, 14 Nov 2016 18:48:53 -0500 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.31,640,1473145200"; d="scan'208";a="31264290" Date: Mon, 14 Nov 2016 15:48:50 -0800 From: Jarkko Sakkinen To: Nayna Cc: "moderated list:TPM DEVICE DRIVER" , open list , linux-security-module@vger.kernel.org Subject: Re: [tpmdd-devel] [PATCH RFC 2/2] tpm: refactor tpm2_get_tpm_pt to tpm2_getcap_cmd Message-ID: <20161114234850.iat2zkqvuva6ae6t@intel.com> References: <1476008057-2395-1-git-send-email-jarkko.sakkinen@linux.intel.com> <1476008057-2395-3-git-send-email-jarkko.sakkinen@linux.intel.com> <58254759.80406@linux.vnet.ibm.com> <20161112000242.63hgv5ujmkr7hy6a@intel.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20161112000242.63hgv5ujmkr7hy6a@intel.com> Organization: Intel Finland Oy - BIC 0357606-4 - Westendinkatu 7, 02160 Espoo User-Agent: Mutt/1.6.2-neo (2016-08-21) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 6070 Lines: 150 On Fri, Nov 11, 2016 at 04:02:43PM -0800, Jarkko Sakkinen wrote: > On Fri, Nov 11, 2016 at 09:51:45AM +0530, Nayna wrote: > > > > > > On 10/09/2016 03:44 PM, Jarkko Sakkinen wrote: > > > Refactored tpm2_get_tpm_pt to tpm2_getcap_cmd, which means that it also > > > takes capability ID as input. This is required to access > > > TPM_CAP_HANDLES, which contains metadata needed for swapping transient > > > data. > > > > > > Signed-off-by: Jarkko Sakkinen > > > --- > > > drivers/char/tpm/tpm.h | 6 +++- > > > drivers/char/tpm/tpm2-cmd.c | 64 ++++++++++++++++++++--------------------- > > > drivers/char/tpm/tpm_tis_core.c | 3 +- > > > 3 files changed, 38 insertions(+), 35 deletions(-) > > > > > > diff --git a/drivers/char/tpm/tpm.h b/drivers/char/tpm/tpm.h > > > index 0fab6d5..8176f42 100644 > > > --- a/drivers/char/tpm/tpm.h > > > +++ b/drivers/char/tpm/tpm.h > > > @@ -85,6 +85,10 @@ enum tpm2_capabilities { > > > TPM2_CAP_TPM_PROPERTIES = 6, > > > }; > > > > > > +enum tpm2_properties { > > > + TPM2_PT_FAMILY_INDICATOR = 0x100, > > > +}; > > > + > > > enum tpm2_startup_types { > > > TPM2_SU_CLEAR = 0x0000, > > > TPM2_SU_STATE = 0x0001, > > > @@ -485,7 +489,7 @@ int tpm2_seal_trusted(struct tpm_chip *chip, > > > int tpm2_unseal_trusted(struct tpm_chip *chip, > > > struct trusted_key_payload *payload, > > > struct trusted_key_options *options); > > > -ssize_t tpm2_get_tpm_pt(struct tpm_chip *chip, u32 property_id, > > > +ssize_t tpm2_getcap_cmd(struct tpm_chip *chip, u32 cap_id, u32 property_id, > > > u32 *value, const char *desc); > > > > > > int tpm2_auto_startup(struct tpm_chip *chip); > > > diff --git a/drivers/char/tpm/tpm2-cmd.c b/drivers/char/tpm/tpm2-cmd.c > > > index 2900e18..fcf3d86 100644 > > > --- a/drivers/char/tpm/tpm2-cmd.c > > > +++ b/drivers/char/tpm/tpm2-cmd.c > > > @@ -111,13 +111,13 @@ struct tpm2_pcr_extend_in { > > > u8 digest[TPM_DIGEST_SIZE]; > > > } __packed; > > > > > > -struct tpm2_get_tpm_pt_in { > > > +struct tpm2_getcap_in { > > > __be32 cap_id; > > > __be32 property_id; > > > __be32 property_cnt; > > > } __packed; > > > > > > -struct tpm2_get_tpm_pt_out { > > > +struct tpm2_getcap_out { > > > u8 more_data; > > > __be32 subcap_id; > > > __be32 property_cnt; > > > @@ -140,8 +140,8 @@ union tpm2_cmd_params { > > > struct tpm2_pcr_read_in pcrread_in; > > > struct tpm2_pcr_read_out pcrread_out; > > > struct tpm2_pcr_extend_in pcrextend_in; > > > - struct tpm2_get_tpm_pt_in get_tpm_pt_in; > > > - struct tpm2_get_tpm_pt_out get_tpm_pt_out; > > > + struct tpm2_getcap_in getcap_in; > > > + struct tpm2_getcap_out getcap_out; > > > struct tpm2_get_random_in getrandom_in; > > > struct tpm2_get_random_out getrandom_out; > > > }; > > > @@ -435,16 +435,6 @@ int tpm2_get_random(struct tpm_chip *chip, u8 *out, size_t max) > > > return total ? total : -EIO; > > > } > > > > > > -#define TPM2_GET_TPM_PT_IN_SIZE \ > > > - (sizeof(struct tpm_input_header) + \ > > > - sizeof(struct tpm2_get_tpm_pt_in)) > > > - > > > -static const struct tpm_input_header tpm2_get_tpm_pt_header = { > > > - .tag = cpu_to_be16(TPM2_ST_NO_SESSIONS), > > > - .length = cpu_to_be32(TPM2_GET_TPM_PT_IN_SIZE), > > > - .ordinal = cpu_to_be32(TPM2_CC_GET_CAPABILITY) > > > -}; > > > - > > > /** > > > * Append TPMS_AUTH_COMMAND to the buffer. The buffer must be allocated with > > > * tpm_buf_alloc(). > > > @@ -750,35 +740,43 @@ out: > > > return rc; > > > } > > > > > > +#define TPM2_GETCAP_IN_SIZE \ > > > + (sizeof(struct tpm_input_header) + sizeof(struct tpm2_getcap_in)) > > > + > > > +static const struct tpm_input_header tpm2_getcap_header = { > > > + .tag = cpu_to_be16(TPM2_ST_NO_SESSIONS), > > > + .length = cpu_to_be32(TPM2_GETCAP_IN_SIZE), > > > + .ordinal = cpu_to_be32(TPM2_CC_GET_CAPABILITY) > > > +}; > > > + > > > /** > > > - * tpm2_get_tpm_pt() - get value of a TPM_CAP_TPM_PROPERTIES type property > > > - * @chip: TPM chip to use. > > > - * @property_id: property ID. > > > - * @value: output variable. > > > + * tpm2_getcap_cmd() - execute a TPM2_GetCapability command > > > + * @chip: TPM chip to use > > > + * @cap_id: capability ID > > > + * @property_id: property ID > > > + * @value: value of the property > > > * @desc: passed to tpm_transmit_cmd() > > > * > > > - * 0 is returned when the operation is successful. If a negative number is > > > - * returned it remarks a POSIX error code. If a positive number is returned > > > - * it remarks a TPM error. > > > + * Return: same as with tpm_transmit_cmd > > > */ > > > -ssize_t tpm2_get_tpm_pt(struct tpm_chip *chip, u32 property_id, u32 *value, > > > - const char *desc) > > > +ssize_t tpm2_getcap_cmd(struct tpm_chip *chip, u32 cap_id, u32 property_id, > > > + u32 *value, const char *desc) > > > > This function currently returns single value "u32 *value" as output data. > > > > Some calling function expect list of values from capabilities output. > > For eg., get_active_banks() use TPM_CAP_PCRS capability to retrieve list of > > active banks. And this capability returns array of pcr selections(which is a > > struct representing each active PCR bank) > > > > I was thinking, can we define output parameter as struct of cap_id and union > > of expected cap_data ? > > Unless you have major concerns about performance, which I think are not > relevant here, calling this in a loop is perfectly adequate and a lot of > simpler than having a generic version (with moreData handling and > everything). > > I would rather see uses of struct cap_t to shrink than to expand. The > same goes for other horrific unions that exist today in the driver. If you are fine with this patch (give Reviewed-by) I can apply this and add to my 4.10 pull request so that we have common baseline to develop both event log and the resource manager. This is a very low risk commit to take to 4.10 because it is only used for interrupt generation in the TIS driver at the moment. /Jarkko