From patchwork Mon Feb 13 08:38:26 2023 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: Jarkko Sakkinen X-Patchwork-Id: 56099 Return-Path: Delivered-To: ouuuleilei@gmail.com Received: by 2002:adf:eb09:0:0:0:0:0 with SMTP id s9csp2237729wrn; Mon, 13 Feb 2023 00:48:49 -0800 (PST) X-Google-Smtp-Source: AK7set/z9zV0jJ2XJYmQB4l74kTgrtZ2CwSYTddljsLvAWexg4t5WDhg37CdX7SCQTiTzCySW18W X-Received: by 2002:a05:6a20:3ca6:b0:bf:9f83:2374 with SMTP id b38-20020a056a203ca600b000bf9f832374mr28891318pzj.52.1676278129427; Mon, 13 Feb 2023 00:48:49 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1676278129; cv=none; d=google.com; s=arc-20160816; b=KH+SWAmUUcJhbZHNMTffcDLdlygLQ6SQQaCoOkPAAlpk0x0kSIVD+IFJSoZhDrTGnI k/j+DdgjBdj6EJuFCfDVstHOFM9U+M68KSxyXUM/tcPlMWDbQ9LMgxAESLsARTfaQ0ad CogrQ+mCFRxxKDeeJyxS/KToIFfnmCq8+qpHMWi3aNefUg4Dpt+KHwOBmfqu5Kvs2J4j 0ueDHkLR4rlBWgaIMl9+jFgB2/hVDzk5bMYI9N5eC83JqfldJ+Zw/l1bcC3wiN2qECZh INJM4fOrVmW6Lz38WKPdkRbXYDZzsjwGpFj2vnGe4hOw/DHxXDOu6kxvtRAcvfgqNNwJ 8DUw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:content-transfer-encoding:content-disposition :mime-version:message-id:subject:cc:to:from:date:dkim-signature; bh=kFsZ6e++cQDUrh0ure1BBzqhAYii0XexTEcTDsLRNjw=; b=N5sb4lps8C7v/flkKHDoYLQGLwAdURVopoiUt6WyZb4vzgHOVE8YJN79WAMwS7FfUJ ic0RwoD8dT3qCr+RsSBIbkKTX0Tw1vyeZZvgioWXAPONNhWbHowyLYH87MVcrvZE2umc dWKN0/SdbMNOIFIC9J/P0wlU8oXPRu+iltVqqWBaBpRFJXsZIog/whB3WkA2E95ENE6K pJuMB4A8cW2V8m08ZCXXztIIx7kcHsWopPaSXI+3NT+mHScdZofS2bub+8TGHlSu7YAW /dMlUOIGjdsR8trTveyrSkAy3/41KLz+kQjiqFnHV2fIK/SgfJclb8wlOWxDIaVnzw2B L3vg== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@kernel.org header.s=k20201202 header.b="OoKbJzb/"; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=kernel.org Received: from out1.vger.email (out1.vger.email. [2620:137:e000::1:20]) by mx.google.com with ESMTP id m137-20020a633f8f000000b004fb96b91c54si3831211pga.93.2023.02.13.00.48.36; Mon, 13 Feb 2023 00:48:49 -0800 (PST) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20; Authentication-Results: mx.google.com; dkim=pass header.i=@kernel.org header.s=k20201202 header.b="OoKbJzb/"; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S230079AbjBMIil (ORCPT + 99 others); Mon, 13 Feb 2023 03:38:41 -0500 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:47194 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S230102AbjBMIid (ORCPT ); Mon, 13 Feb 2023 03:38:33 -0500 Received: from dfw.source.kernel.org (dfw.source.kernel.org [139.178.84.217]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 390E94C0A; Mon, 13 Feb 2023 00:38:30 -0800 (PST) Received: from smtp.kernel.org (relay.kernel.org [52.25.139.140]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by dfw.source.kernel.org (Postfix) with ESMTPS id A5D9D60EE0; Mon, 13 Feb 2023 08:38:29 +0000 (UTC) Received: by smtp.kernel.org (Postfix) with ESMTPSA id ACDF2C433EF; Mon, 13 Feb 2023 08:38:28 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=kernel.org; s=k20201202; t=1676277509; bh=FKtCydh9BD0e/LHKfKCIJTVoObje2MGUwpf/rlBD/OY=; h=Date:From:To:Cc:Subject:From; b=OoKbJzb/LKp0SqzjPLOahO8ejh9BisPvo/RLq66V5+mPYJaMoSF4YV4kB/hTDOaQX DzWyUl8wo+DO2uNxkLygN9Z/xWqK8B2Nr8o+g7vUhJZjU4nDhvqoevwRG3LpOjcO7t wKgwLogsVNqb1sJnVI/JHHua37NMkGQRd4VFwj70R/sMTxR6R7VsWGX8S3Sb/QtJcU 8N1k/5sTCzsnrt54miZka0tR+EUzCtsl0H7m/NUY0Elk1mgBw+0qXv168+i3ae7CR2 shyqXVuw9rkAJyfvHsi7No3LbmNfYqtatC0KYxuVx+My4xKPvzKBLrJILN8wjUbUsX fHfybME90AoZA== Date: Mon, 13 Feb 2023 10:38:26 +0200 From: Jarkko Sakkinen To: Linus Torvalds Cc: Thomas =?iso-8859-1?q?Wei=DFschuh?= , Matthew Garrett , Uwe =?iso-8859-1?q?Kleine-K=F6nig?= , Peter Huewe , Jason Gunthorpe , linux-integrity@vger.kernel.org, linux-kernel@vger.kernel.org Subject: [GIT PULL] tpm: changes for v6.3-rc1 Message-ID: MIME-Version: 1.0 Content-Disposition: inline X-Spam-Status: No, score=-7.1 required=5.0 tests=BAYES_00,DKIMWL_WL_HIGH, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,RCVD_IN_DNSWL_HI, SPF_HELO_NONE,SPF_PASS autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on lindbergh.monkeyblade.net Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org X-getmail-retrieved-from-mailbox: =?utf-8?q?INBOX?= X-GMAIL-THRID: =?utf-8?q?1757705016005790905?= X-GMAIL-MSGID: =?utf-8?q?1757705016005790905?= Hi, In additon to bug fixes, these are noteworthy changes: * In TPM I2C drivers, migrate from probe() to probe_new() (a new driver model in I2C). * TPM CRB: Pluton support * Add duplicate hash detection to the blacklist keyring in order to give more meaningful klog output than e.g. [1]. [1] https://askubuntu.com/questions/1436856/ubuntu-22-10-blacklist-problem-blacklisting-hash-13-message-on-boot The following changes since commit ceaa837f96adb69c0df0397937cd74991d5d821a: Linux 6.2-rc8 (2023-02-12 14:10:17 -0800) are available in the Git repository at: git://git.kernel.org/pub/scm/linux/kernel/git/jarkko/linux-tpmdd.git tags/tpm-v6.3-rc1 for you to fetch changes up to 85b93bbd1c9768d09adebbe9f33bab0d4ec94404: tpm: add vendor flag to command code validation (2023-02-13 10:11:20 +0200) ---------------------------------------------------------------- tpm: v6.3-rc1 ---------------------------------------------------------------- Arnd Bergmann (1): crypto: certs: fix FIPS selftest dependency Denis Kenzior (1): KEYS: asymmetric: Fix ECDSA use via keyctl uapi Eddie James (2): tpm: Use managed allocation for bios event log tpm: Add reserved memory event log Julien Gomes (1): tpm: add vendor flag to command code validation Matthew Garrett (1): tpm_crb: Add support for CRB devices based on Pluton Thomas Weißschuh (3): certs: make blacklisted hash available in klog KEYS: Add new function key_create() certs: don't try to update blacklist keys Uwe Kleine-König (5): tpm: st33zp24: Convert to i2c's .probe_new() tpm: tpm_i2c_atmel: Convert to i2c's .probe_new() tpm: tpm_i2c_infineon: Convert to i2c's .probe_new() tpm: tpm_i2c_nuvoton: Convert to i2c's .probe_new() tpm: tis_i2c: Convert to i2c's .probe_new() certs/blacklist.c | 21 +++--- crypto/asymmetric_keys/Kconfig | 2 +- crypto/asymmetric_keys/pkcs7_verify.c | 1 + crypto/asymmetric_keys/public_key.c | 24 +++++- drivers/char/tpm/eventlog/acpi.c | 5 +- drivers/char/tpm/eventlog/efi.c | 13 ++-- drivers/char/tpm/eventlog/of.c | 35 ++++++++- drivers/char/tpm/st33zp24/i2c.c | 5 +- drivers/char/tpm/tpm-chip.c | 1 - drivers/char/tpm/tpm2-cmd.c | 4 +- drivers/char/tpm/tpm_crb.c | 100 ++++++++++++++++++++++--- drivers/char/tpm/tpm_i2c_atmel.c | 5 +- drivers/char/tpm/tpm_i2c_infineon.c | 5 +- drivers/char/tpm/tpm_i2c_nuvoton.c | 6 +- drivers/char/tpm/tpm_tis_i2c.c | 5 +- include/acpi/actbl3.h | 1 + include/linux/key.h | 8 ++ include/linux/tpm.h | 1 + security/keys/key.c | 137 +++++++++++++++++++++++++--------- 19 files changed, 293 insertions(+), 86 deletions(-)