From patchwork Fri Nov 10 22:27:41 2023 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ross Philipson X-Patchwork-Id: 164008 Return-Path: Delivered-To: ouuuleilei@gmail.com Received: by 2002:a59:b129:0:b0:403:3b70:6f57 with SMTP id q9csp1420546vqs; Fri, 10 Nov 2023 14:28:49 -0800 (PST) X-Google-Smtp-Source: AGHT+IGYJ6ybCSdnigQRJsEtcpOjkzZuqlUEckCBgjtruiXBPnY8II5+2/p9mHN9cx2hpbZRA/Jk X-Received: by 2002:a05:6a00:3693:b0:68b:f529:a329 with SMTP id dw19-20020a056a00369300b0068bf529a329mr404638pfb.5.1699655329422; Fri, 10 Nov 2023 14:28:49 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1699655329; cv=none; d=google.com; s=arc-20160816; b=jx8pokrjz9A7lHfpBOZt5r0BBSkFWMv3LiohV901BySOX6qo2llFJyINSCqKOqq2tu PnhUWvuNcEsFcXniN6qm2F2uBiBEfY7DCM1gtkTpG/TEm3tziQ3/TjCHvAhPoBuRhp2F Oh2oOvtT1n1CK2UdmKj0FVB2ISJskYqJEK6LiyCaWt/YNXVTv9GYT0nyMDQjPdapNb+J XWKdhg/2jELGzz6NsynQhxk1Kd9cci52XEbcMaEE0KVzSXrSb4IhaLe6bhPR2wHC+909 /aEs1eSUP6eGsDwq2a4HT4eJM8mvI0EBIsKtakPEqkRdaF5xjRNzoBXkYHMBBSmDp7Yy Y4kA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:content-transfer-encoding:mime-version :references:in-reply-to:message-id:date:subject:cc:to:from :dkim-signature; bh=/J1USLKHYBG5hNrFfPe8N+O7zw8z5jTGeKyBk6ktFDs=; fh=3RswKj8aEXyBJ6DCbqm+xF4dpuJnrF7Rjf3Zdj/lhD8=; b=y8N3sHDDSEBCeiXripNi625C+VMCiCHXo91wlitYwCAp/ZuotEdHB9zy5VgXWtQu/Y HdMalrbhV7cIL6sxr6jLGTxNTwRy3mm/4paFKDcHyfiXb8Q4+JwLyjPl7FW/LA5M2Syn BpSZ++D8zQFUNg9wJ2n4BW22gyCXENL7rKgdYih9crCGsBzBMy9a7qc0fp+CvZ7uM4FF Vy9rPDv1iPFg3nQTQz03PRG5gNoMYXJnyWn6AIvoBv8Kicl+fNxWaIzARQdN5xTYvxpu nXtp8LhtakNlQ2e2992u38bDqbwZ5odbLEwB7LGb6UEjbXGDYdUZHSonu9K5rCcWMf0g pK0Q== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@oracle.com header.s=corp-2023-03-30 header.b=JKEStwqN; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.37 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=oracle.com Received: from snail.vger.email (snail.vger.email. [23.128.96.37]) by mx.google.com with ESMTPS id k64-20020a636f43000000b005b8a295f016si397370pgc.64.2023.11.10.14.28.49 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 10 Nov 2023 14:28:49 -0800 (PST) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.37 as permitted sender) client-ip=23.128.96.37; Authentication-Results: mx.google.com; dkim=pass header.i=@oracle.com header.s=corp-2023-03-30 header.b=JKEStwqN; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.37 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=oracle.com Received: from out1.vger.email (depot.vger.email [IPv6:2620:137:e000::3:0]) by snail.vger.email (Postfix) with ESMTP id AE6DE83BE2F8; Fri, 10 Nov 2023 14:28:48 -0800 (PST) X-Virus-Status: Clean X-Virus-Scanned: clamav-milter 0.103.11 at snail.vger.email Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S229830AbjKJW2q (ORCPT + 29 others); Fri, 10 Nov 2023 17:28:46 -0500 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:60658 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S229548AbjKJW2j (ORCPT ); Fri, 10 Nov 2023 17:28:39 -0500 Received: from mx0a-00069f02.pphosted.com (mx0a-00069f02.pphosted.com [205.220.165.32]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 26E044205; Fri, 10 Nov 2023 14:28:36 -0800 (PST) Received: from pps.filterd (m0333521.ppops.net [127.0.0.1]) by mx0b-00069f02.pphosted.com (8.17.1.19/8.17.1.19) with ESMTP id 3AAHiIss020588; Fri, 10 Nov 2023 22:28:00 GMT DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=oracle.com; h=from : to : cc : subject : date : message-id : in-reply-to : references : mime-version : content-transfer-encoding; s=corp-2023-03-30; bh=/J1USLKHYBG5hNrFfPe8N+O7zw8z5jTGeKyBk6ktFDs=; b=JKEStwqNcvsIrDsZNjZ5V4YNXqFLwc1qV/gKiDuBlhfCbHfJJ61nkI4HI/jbCio+9HVv gJAvAv1/IXwDt1y6WZ5NVHks5/B7w0AgSQB3PCqSv5XWDKc7Keh7SgJ+KNM8D5cgtY/j VOX+GebU+LxmthsRrl5jkHmMfCM6GI86Kv0oCVVxUC/graN4obP+v9C0qj9zCjcmotN6 hcF6YRgZUdtHM9aQJKbSwD2cpeBLgApl49VDdpGhbkf17ipI/aacaEy0ER5EGZqzEDaw GMAKxh5L+Yg2ACoJ34mxyr4pQqaBfnhfTMC8gmr5y8V8utWJ0N1v/oXca8hErBgZz0P5 PQ== Received: from iadpaimrmta01.imrmtpd1.prodappiadaev1.oraclevcn.com (iadpaimrmta01.appoci.oracle.com [130.35.100.223]) by mx0b-00069f02.pphosted.com (PPS) with ESMTPS id 3u7w23pys4-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Fri, 10 Nov 2023 22:27:59 +0000 Received: from pps.filterd (iadpaimrmta01.imrmtpd1.prodappiadaev1.oraclevcn.com [127.0.0.1]) by iadpaimrmta01.imrmtpd1.prodappiadaev1.oraclevcn.com (8.17.1.19/8.17.1.19) with ESMTP id 3AALP7lN023839; Fri, 10 Nov 2023 22:27:58 GMT Received: from pps.reinject (localhost [127.0.0.1]) by iadpaimrmta01.imrmtpd1.prodappiadaev1.oraclevcn.com (PPS) with ESMTPS id 3u7w28nb0n-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Fri, 10 Nov 2023 22:27:57 +0000 Received: from iadpaimrmta01.imrmtpd1.prodappiadaev1.oraclevcn.com (iadpaimrmta01.imrmtpd1.prodappiadaev1.oraclevcn.com [127.0.0.1]) by pps.reinject (8.17.1.5/8.17.1.5) with ESMTP id 3AAMRsa4039112; Fri, 10 Nov 2023 22:27:57 GMT Received: from ovs113.us.oracle.com (ovs113.us.oracle.com [10.149.224.213]) by iadpaimrmta01.imrmtpd1.prodappiadaev1.oraclevcn.com (PPS) with ESMTPS id 3u7w28nayh-4 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Fri, 10 Nov 2023 22:27:57 +0000 From: Ross Philipson To: linux-kernel@vger.kernel.org, x86@kernel.org, linux-integrity@vger.kernel.org, linux-doc@vger.kernel.org, linux-crypto@vger.kernel.org, iommu@lists.linux-foundation.org, kexec@lists.infradead.org, linux-efi@vger.kernel.org Cc: ross.philipson@oracle.com, dpsmith@apertussolutions.com, tglx@linutronix.de, mingo@redhat.com, bp@alien8.de, hpa@zytor.com, ardb@kernel.org, mjg59@srcf.ucam.org, James.Bottomley@hansenpartnership.com, luto@amacapital.net, nivedita@alum.mit.edu, kanth.ghatraju@oracle.com, trenchboot-devel@googlegroups.com Subject: [PATCH v7 03/13] x86: Secure Launch Kconfig Date: Fri, 10 Nov 2023 17:27:41 -0500 Message-Id: <20231110222751.219836-4-ross.philipson@oracle.com> X-Mailer: git-send-email 2.39.3 In-Reply-To: <20231110222751.219836-1-ross.philipson@oracle.com> References: <20231110222751.219836-1-ross.philipson@oracle.com> MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.272,Aquarius:18.0.987,Hydra:6.0.619,FMLib:17.11.176.26 definitions=2023-11-10_20,2023-11-09_01,2023-05-22_02 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 mlxlogscore=999 phishscore=0 spamscore=0 mlxscore=0 adultscore=0 malwarescore=0 bulkscore=0 suspectscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2311060000 definitions=main-2311100187 X-Proofpoint-GUID: AIdzskOBHWGssm5ENHrSQTwL5gDLOSDY X-Proofpoint-ORIG-GUID: AIdzskOBHWGssm5ENHrSQTwL5gDLOSDY X-Spam-Status: No, score=-2.1 required=5.0 tests=BAYES_00,DKIMWL_WL_MED, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H5,RCVD_IN_MSPIKE_WL, SPF_HELO_NONE,SPF_NONE,T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on lindbergh.monkeyblade.net Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org X-Greylist: Sender passed SPF test, not delayed by milter-greylist-4.6.4 (snail.vger.email [0.0.0.0]); Fri, 10 Nov 2023 14:28:48 -0800 (PST) X-getmail-retrieved-from-mailbox: INBOX X-GMAIL-THRID: 1782217786815714834 X-GMAIL-MSGID: 1782217786815714834 Initial bits to bring in Secure Launch functionality. Add Kconfig options for compiling in/out the Secure Launch code. Signed-off-by: Ross Philipson --- arch/x86/Kconfig | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/arch/x86/Kconfig b/arch/x86/Kconfig index 3762f41bb092..1b983e336611 100644 --- a/arch/x86/Kconfig +++ b/arch/x86/Kconfig @@ -2066,6 +2066,18 @@ config EFI_RUNTIME_MAP See also Documentation/ABI/testing/sysfs-firmware-efi-runtime-map. +config SECURE_LAUNCH + bool "Secure Launch support" + default n + depends on X86_64 && X86_X2APIC + help + The Secure Launch feature allows a kernel to be loaded + directly through an Intel TXT measured launch. Intel TXT + establishes a Dynamic Root of Trust for Measurement (DRTM) + where the CPU measures the kernel image. This feature then + continues the measurement chain over kernel configuration + information and init images. + source "kernel/Kconfig.hz" config ARCH_SUPPORTS_KEXEC