Re: [PATCH v2 4/4] ibmvtpm: Add support for trusted boot using a vTPM 2.0

2021-07-30 Thread Daniel Kiper
On Thu, Jul 29, 2021 at 09:30:49AM -0400, Stefan Berger wrote: > On 7/28/21 9:25 AM, Daniel Kiper wrote: > > On Tue, Jul 20, 2021 at 05:14:49PM -0400, Stefan Berger wrote: > > > > > +#define IEEE1275_CELL_TRUE ((grub_ieee1275_cell_t) -1) > > This smells like global constant. Does not it? If yes

Re: Device tree support for x86 on Linux

2021-07-30 Thread Daniel Kiper
Hi Mislav, On Thu, Jul 29, 2021 at 08:43:45AM +, Mislav Stublić wrote: > Hi, > > I am planning to add support for device tree loading on x86 with > UEFI and Linux as i understand this is currently not supported. We need > this for a board we are developing so i would test my patches in our > d

Re: [PATCH v2 4/4] ibmvtpm: Add support for trusted boot using a vTPM 2.0

2021-07-30 Thread Stefan Berger
On 7/30/21 8:44 AM, Daniel Kiper wrote: On Thu, Jul 29, 2021 at 09:30:49AM -0400, Stefan Berger wrote: On 7/28/21 9:25 AM, Daniel Kiper wrote: On Tue, Jul 20, 2021 at 05:14:49PM -0400, Stefan Berger wrote: +#define IEEE1275_CELL_TRUE ((grub_ieee1275_cell_t) -1) This smells like global c

[PATCH v3 4/4] ibmvtpm: Add support for trusted boot using a vTPM 2.0

2021-07-30 Thread Stefan Berger
From: Stefan Berger Add support for trusted boot using a vTPM 2.0 on the IBM IEEE1275 PowerPC platform. With this patch grub now measures text and binary data into the TPM's PCRs 8 and 9 in the same way as the x86_64 platform does. This patch requires Daniel Axtens's patches for claiming more me

[PATCH v3 3/4] ieee1275: request memory with ibm, client-architecture-support

2021-07-30 Thread Stefan Berger
From: Daniel Axtens On PowerVM, the first time we boot a Linux partition, we may only get 256MB of real memory area, even if the partition has more memory. This isn't really enough. Fortunately, the Power Architecture Platform Reference (PAPR) defines a method we can call to ask for more memory.

[PATCH v3 2/4] ieee1275: claim more memory

2021-07-30 Thread Stefan Berger
From: Daniel Axtens On powerpc-ieee1275, we are running out of memory trying to verify anything. This is because: - we have to load an entire file into memory to verify it. This is extremely difficult to change with appended signatures. - We only have 32MB of heap. - Distro kernels are now

[PATCH v3 0/4] Add support for trusted boot on IBM PPC platform

2021-07-30 Thread Stefan Berger
From: Stefan Berger This series of patches adds support for trusted boot using vTPM on the IBM IEEE1275 PowerPC platform. Stefan v3: - Rebased on latest master - Moving #defines from ieee1275.c to ieee1275.h - More refactoring in patch 4 v2: - Prepended Daniel's patches to claim more

[PATCH v3 1/4] ieee1275: Move #defines into common ieee1275.h header

2021-07-30 Thread Stefan Berger
From: Stefan Berger Move some #defines from ieee1275.c into the common ieee1275.h header file. Adjust the case used in IHANDLE_INVALID to use proper ihandle_t. Signed-off-by: Stefan Berger --- grub-core/kern/ieee1275/ieee1275.c | 29 - include/grub/ieee1275/ieee1275

Bug#991691: Possible CVE-2014-5461 in grub2

2021-07-30 Thread Movses Tovmasyan
Package: grub2 Version: 2.02~beta3-5+deb9u2 Tags: patch grub2 uses the obsolete version of minilua (single-file port of Lua) which has CVE-2014-5461 Patch attached below. patch Description: Binary data ___ Grub-devel mailing list Grub-devel@gnu.org htt