Received: by 2002:a5b:505:0:0:0:0:0 with SMTP id o5csp257765ybp; Thu, 10 Oct 2019 17:39:00 -0700 (PDT) X-Google-Smtp-Source: APXvYqwifBbvkLMHOIevZVghAWiuzKdsOhn3LfAZIeMWnrYwNiosyf5+eij1AZOe7b4nOAVmqyMP X-Received: by 2002:a50:fc9a:: with SMTP id f26mr10755443edq.217.1570754340688; Thu, 10 Oct 2019 17:39:00 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1570754340; cv=none; d=google.com; s=arc-20160816; b=TDr6tkLmDtikIzrqeJ1rNo8UP1zDMAPBop9JD6mYiJ48D9xPA3mvBdR9jl7V3knKBh btaDpp2M7aOPg2uIGlGMRzqyK2OfqDuSqUiFsfGPMQjxN8/+8zSS2fdb9gOlzJpBE8rk V1KkPurAFBXXmfkarvj9up3qZpnx2NgVzKXG3DvDRy1QTIg/PAnKtDu6PHXaonuIL+s2 FJn1NTlZYC+zdZLbybBHt6ShNhZPeCbPQeazEoOuI4osjtXgeSteH7JX28LbvkClUtSL bW1607d3tF6E4H6USDgisPwp6UhtJwEJ4t2d/A9cNhEnba1edemMuY5wAgVFrRFm7eNr DmAg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:references:in-reply-to:message-id:date :subject:cc:to:from:dkim-signature:dkim-filter; bh=9zxWdQ/r22bT3cVRgOHw6zLIXRzDvJgVgN+p5esXlKE=; b=d2eVNY+iDqfFakJqkelhPTYOkR4ULGHkMKHgP6LV2Sp2vSXPbFUfuLxXTnZ2AQ2h0q p+Evmm9QrEPhGfGhh/vqnJN4f9O2n2aUEoDI0zNq6vvQm6he4w4cAz5gkqS9NnfYUzy5 t/cS+7teI/pWHjHvmUmMNFevMqpx1nW1Tp6e3OVCSsIaHzf+Ej1Ga8EWshlfQymMMpEu SWSBMsSDRfF0+073K4wChfiskA/DcHBINuGKN94Oh/3SJw94+vXUp321Yd8ZvS23eAXF VTNHyEAfiDsjgr3WupK47Ag42VRus45NV0vtbVaXyYLX2A8AR77Z8bXen7alvPBAI6Wi Ag8A== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@linux.microsoft.com header.s=default header.b=agZrLl42; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=linux.microsoft.com Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id k7si4191281eja.377.2019.10.10.17.38.37; Thu, 10 Oct 2019 17:39:00 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; dkim=pass header.i=@linux.microsoft.com header.s=default header.b=agZrLl42; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=linux.microsoft.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1727652AbfJKAgR (ORCPT + 99 others); Thu, 10 Oct 2019 20:36:17 -0400 Received: from linux.microsoft.com ([13.77.154.182]:45236 "EHLO linux.microsoft.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1726429AbfJKAgN (ORCPT ); Thu, 10 Oct 2019 20:36:13 -0400 Received: from prsriva-Precision-Tower-5810.corp.microsoft.com (unknown [167.220.2.18]) by linux.microsoft.com (Postfix) with ESMTPSA id CE50820B711B; Thu, 10 Oct 2019 17:36:11 -0700 (PDT) DKIM-Filter: OpenDKIM Filter v2.11.0 linux.microsoft.com CE50820B711B DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linux.microsoft.com; s=default; t=1570754171; bh=9zxWdQ/r22bT3cVRgOHw6zLIXRzDvJgVgN+p5esXlKE=; h=From:To:Cc:Subject:Date:In-Reply-To:References:From; b=agZrLl42Ab8MIl+0vpNxZt+QIIcF0g8rZaCvn+5z3iJ8Q8+Qa8J0Jr6DWYgrk32Ob Ap9dQxoMsYpxTuqUVmeFSgzjWoOScFlH6VqWnMcbxC+jObWRIjMilTBLaoL+WJyY95 BS6yU5tG030Ju7L/dkbYdLW4WLL5Dogh+i5Op7bc= From: Prakhar Srivastava To: linux-kernel@vger.kernel.org, linux-arm-kernel@lists.infradead.org, linux-integrity@vger.kernel.org, kexec@lists.infradead.org Cc: arnd@arndb.de, jean-philippe@linaro.org, allison@lohutok.net, kristina.martsenko@arm.org, yamada.masahiro@socionext.com, duwe@lst.de, mark.rutland@arm.com, tglx@linutronix.de, takahiro.akashi@linaro.org, james.morse@arm.org, catalin.marinas@arm.com, sboyd@kernel.org, bauerman@linux.ibm.com, zohar@linux.ibm.com Subject: [PATCH V4 2/2] update powerpc implementation to call into of_ima* Date: Thu, 10 Oct 2019 17:36:00 -0700 Message-Id: <20191011003600.22090-3-prsriva@linux.microsoft.com> X-Mailer: git-send-email 2.17.1 In-Reply-To: <20191011003600.22090-1-prsriva@linux.microsoft.com> References: <20191011003600.22090-1-prsriva@linux.microsoft.com> Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org update powerpc ima buffer pass implementationt to call into of_ima* for a cross architecture support. Signed-off-by: Prakhar Srivastava --- arch/powerpc/include/asm/ima.h | 5 - arch/powerpc/kernel/Makefile | 3 - arch/powerpc/kernel/ima_kexec.c | 170 +++----------------------------- 3 files changed, 14 insertions(+), 164 deletions(-) diff --git a/arch/powerpc/include/asm/ima.h b/arch/powerpc/include/asm/ima.h index ead488cf3981..f50a4f622f3d 100644 --- a/arch/powerpc/include/asm/ima.h +++ b/arch/powerpc/include/asm/ima.h @@ -6,12 +6,7 @@ struct kimage; int ima_get_kexec_buffer(void **addr, size_t *size); int ima_free_kexec_buffer(void); - -#ifdef CONFIG_IMA void remove_ima_buffer(void *fdt, int chosen_node); -#else -static inline void remove_ima_buffer(void *fdt, int chosen_node) {} -#endif #ifdef CONFIG_IMA_KEXEC int arch_ima_add_kexec_buffer(struct kimage *image, unsigned long load_addr, diff --git a/arch/powerpc/kernel/Makefile b/arch/powerpc/kernel/Makefile index 56dfa7a2a6f2..339aaae7ed3e 100644 --- a/arch/powerpc/kernel/Makefile +++ b/arch/powerpc/kernel/Makefile @@ -128,11 +128,8 @@ obj-$(CONFIG_KEXEC_CORE) += machine_kexec.o crash.o \ machine_kexec_$(BITS).o obj-$(CONFIG_KEXEC_FILE) += machine_kexec_file_$(BITS).o kexec_elf_$(BITS).o ifdef CONFIG_HAVE_IMA_KEXEC -ifdef CONFIG_IMA obj-y += ima_kexec.o endif -endif - obj-$(CONFIG_AUDIT) += audit.o obj64-$(CONFIG_AUDIT) += compat_audit.o diff --git a/arch/powerpc/kernel/ima_kexec.c b/arch/powerpc/kernel/ima_kexec.c index 720e50e490b6..41f52297de0c 100644 --- a/arch/powerpc/kernel/ima_kexec.c +++ b/arch/powerpc/kernel/ima_kexec.c @@ -6,45 +6,21 @@ * Thiago Jung Bauermann */ -#include #include #include -#include -#include -static int get_addr_size_cells(int *addr_cells, int *size_cells) +/** + * remove_ima_buffer - remove the IMA buffer property and reservation from @fdt + * + * The IMA measurement buffer is of no use to a subsequent kernel, so we always + * remove it from the device tree. + */ +void remove_ima_buffer(void *fdt, int chosen_node) { - struct device_node *root; - - root = of_find_node_by_path("/"); - if (!root) - return -EINVAL; - - *addr_cells = of_n_addr_cells(root); - *size_cells = of_n_size_cells(root); - - of_node_put(root); - - return 0; + fdt_remove_ima_buffer(fdt, chosen_node); + return; } -static int do_get_kexec_buffer(const void *prop, int len, unsigned long *addr, - size_t *size) -{ - int ret, addr_cells, size_cells; - - ret = get_addr_size_cells(&addr_cells, &size_cells); - if (ret) - return ret; - - if (len < 4 * (addr_cells + size_cells)) - return -ENOENT; - - *addr = of_read_number(prop, addr_cells); - *size = of_read_number(prop + 4 * addr_cells, size_cells); - - return 0; -} /** * ima_get_kexec_buffer - get IMA buffer from the previous kernel @@ -55,23 +31,7 @@ static int do_get_kexec_buffer(const void *prop, int len, unsigned long *addr, */ int ima_get_kexec_buffer(void **addr, size_t *size) { - int ret, len; - unsigned long tmp_addr; - size_t tmp_size; - const void *prop; - - prop = of_get_property(of_chosen, "linux,ima-kexec-buffer", &len); - if (!prop) - return -ENOENT; - - ret = do_get_kexec_buffer(prop, len, &tmp_addr, &tmp_size); - if (ret) - return ret; - - *addr = __va(tmp_addr); - *size = tmp_size; - - return 0; + return of_get_ima_buffer(addr, size); } /** @@ -79,52 +39,7 @@ int ima_get_kexec_buffer(void **addr, size_t *size) */ int ima_free_kexec_buffer(void) { - int ret; - unsigned long addr; - size_t size; - struct property *prop; - - prop = of_find_property(of_chosen, "linux,ima-kexec-buffer", NULL); - if (!prop) - return -ENOENT; - - ret = do_get_kexec_buffer(prop->value, prop->length, &addr, &size); - if (ret) - return ret; - - ret = of_remove_property(of_chosen, prop); - if (ret) - return ret; - - return memblock_free(addr, size); - -} - -/** - * remove_ima_buffer - remove the IMA buffer property and reservation from @fdt - * - * The IMA measurement buffer is of no use to a subsequent kernel, so we always - * remove it from the device tree. - */ -void remove_ima_buffer(void *fdt, int chosen_node) -{ - int ret, len; - unsigned long addr; - size_t size; - const void *prop; - - prop = fdt_getprop(fdt, chosen_node, "linux,ima-kexec-buffer", &len); - if (!prop) - return; - - ret = do_get_kexec_buffer(prop, len, &addr, &size); - fdt_delprop(fdt, chosen_node, "linux,ima-kexec-buffer"); - if (ret) - return; - - ret = delete_fdt_mem_rsv(fdt, addr, size); - if (!ret) - pr_debug("Removed old IMA buffer reservation.\n"); + return of_remove_ima_buffer(); } #ifdef CONFIG_IMA_KEXEC @@ -145,27 +60,6 @@ int arch_ima_add_kexec_buffer(struct kimage *image, unsigned long load_addr, return 0; } -static int write_number(void *p, u64 value, int cells) -{ - if (cells == 1) { - u32 tmp; - - if (value > U32_MAX) - return -EINVAL; - - tmp = cpu_to_be32(value); - memcpy(p, &tmp, sizeof(tmp)); - } else if (cells == 2) { - u64 tmp; - - tmp = cpu_to_be64(value); - memcpy(p, &tmp, sizeof(tmp)); - } else - return -EINVAL; - - return 0; -} - /** * setup_ima_buffer - add IMA buffer information to the fdt * @image: kexec image being loaded. @@ -176,44 +70,8 @@ static int write_number(void *p, u64 value, int cells) */ int setup_ima_buffer(const struct kimage *image, void *fdt, int chosen_node) { - int ret, addr_cells, size_cells, entry_size; - u8 value[16]; - - remove_ima_buffer(fdt, chosen_node); - if (!image->arch.ima_buffer_size) - return 0; - - ret = get_addr_size_cells(&addr_cells, &size_cells); - if (ret) - return ret; - - entry_size = 4 * (addr_cells + size_cells); - - if (entry_size > sizeof(value)) - return -EINVAL; - - ret = write_number(value, image->arch.ima_buffer_addr, addr_cells); - if (ret) - return ret; - - ret = write_number(value + 4 * addr_cells, image->arch.ima_buffer_size, - size_cells); - if (ret) - return ret; - - ret = fdt_setprop(fdt, chosen_node, "linux,ima-kexec-buffer", value, - entry_size); - if (ret < 0) - return -EINVAL; - - ret = fdt_add_mem_rsv(fdt, image->arch.ima_buffer_addr, - image->arch.ima_buffer_size); - if (ret) - return -EINVAL; - - pr_debug("IMA buffer at 0x%llx, size = 0x%zx\n", - image->arch.ima_buffer_addr, image->arch.ima_buffer_size); - - return 0; + return fdt_setup_ima_buffer(image->arch.ima_buffer_addr, + image->arch.ima_buffer_size, + fdt, chosen_node); } #endif /* CONFIG_IMA_KEXEC */ -- 2.17.1