arm64: rsi: Add automatic arm-cca-guest module loadingThe TSM module provides guest identification and attestation when aguest runs in CCA realm mode. By creating a dummy platform device,let's en
arm64: rsi: Add automatic arm-cca-guest module loadingThe TSM module provides guest identification and attestation when aguest runs in CCA realm mode. By creating a dummy platform device,let's ensure the module is automatically loaded. The udev daemon loadsthe TSM module after it receives a device addition event. Once thathappens, it can be used earlier in the boot process to decrypt therootfs.Signed-off-by: Jeremy Linton <[email protected]>Reviewed-by: Gavin Shan <[email protected]>Reviewed-by: Steven Price <[email protected]>Link: https://lore.kernel.org/r/[email protected]Signed-off-by: Will Deacon <[email protected]>
show more ...
coco: virt: arm64: Do not enable cca guest driver by defaultAs per the guidelines, new drivers may not be set to default on.An expert user can always select it.Reported-by: Dan Williams <dan.j.w
coco: virt: arm64: Do not enable cca guest driver by defaultAs per the guidelines, new drivers may not be set to default on.An expert user can always select it.Reported-by: Dan Williams <[email protected]>Cc: Will Deacon <[email protected]>Cc: Steven Price <[email protected]>Cc: Sami Mujawar <[email protected]>Link: https://lore.kernel.org/r/[email protected]Link: https://lore.kernel.org/r/[email protected]Signed-off-by: Suzuki K Poulose <[email protected]>Reviewed-by: Steven Price <[email protected]>Signed-off-by: Catalin Marinas <[email protected]>
virt: arm-cca-guest: TSM_REPORT support for realmsIntroduce an arm-cca-guest driver that registers withthe configfs-tsm module to provide user interfaces forretrieving an attestation token.When
virt: arm-cca-guest: TSM_REPORT support for realmsIntroduce an arm-cca-guest driver that registers withthe configfs-tsm module to provide user interfaces forretrieving an attestation token.When a new report is requested the arm-cca-guest driverinvokes the appropriate RSI interfaces to query anattestation token.The steps to retrieve an attestation token are as follows: 1. Mount the configfs filesystem if not already mounted mount -t configfs none /sys/kernel/config 2. Generate an attestation token report=/sys/kernel/config/tsm/report/report0 mkdir $report dd if=/dev/urandom bs=64 count=1 > $report/inblob hexdump -C $report/outblob rmdir $reportSigned-off-by: Sami Mujawar <[email protected]>Signed-off-by: Suzuki K Poulose <[email protected]>Signed-off-by: Steven Price <[email protected]>Reviewed-by: Gavin Shan <[email protected]>Link: https://lore.kernel.org/r/[email protected]Signed-off-by: Catalin Marinas <[email protected]>