linux.git/drivers/char/tpm, branch v4.11

tpm: declare tpm2_get_pcr_allocation() as static

2017-02-20T11:23:18+00:00

There's no need to export tpm2_get_pcr_alloation() because it is only
a helper function for tpm2_auto_startup(). For the same reason it does
not make much sense to maintain documentation for it.

Signed-off-by: Jarkko Sakkinen

tpm: Fix expected number of response bytes of TPM1.2 PCR Extend

2017-02-15T18:09:52+00:00

The TPM1.2 PCR Extend operation only returns 20 bytes in the body,
which is the size of the PCR state.

This fixes a problem where IMA gets errors with every PCR Extend.

Fixes: c659af78eb7b ("tpm: Check size of response before accessing data")
Signed-off-by: Stefan Berger 
Acked-by: Mimi Zohar 
Reviewed-by: Jarkko Sakkinen 
Signed-off-by: Jarkko Sakkinen

tpm xen: drop unneeded chip variable

2017-02-14T17:24:33+00:00

The call that used chip was dropped in 1f0f30e404b3.  Drop the
leftover declaration and initialization.

Signed-off-by: Julia Lawall 
Reviewed-by: Jarkko Sakkinen 
Signed-off-by: Jarkko Sakkinen

tpm: fix misspelled "facilitate" in module parameter description

2017-02-14T17:24:33+00:00

I typoed "facilitate" as "faciltate" a few years back...

Signed-off-by: Dmitry Torokhov 
Reviewed-by: Jarkko Sakkinen 
Signed-off-by: Jarkko Sakkinen

tpm_tis: fix the error handling of init_tis()

2017-02-14T17:24:33+00:00

Add the missing platform_driver_unregister() and remove the duplicate
platform_device_unregister(force_pdev) in the error handling case.

Fixes: 00194826e6be ("tpm_tis: Clean up the force=1 module parameter")
Cc: stable@vger.kernel.org
Signed-off-by: Wei Yongjun 
Reviewed-by: Jason Gunthorpe 
Reviewed-by: Jarkko Sakkinen 
Signed-off-by: Jarkko Sakkinen

tpm: silence an array overflow warning

2017-02-03T20:33:55+00:00

We should check that we're within bounds first before checking that
"chip->active_banks[i] != TPM2_ALG_ERROR" so I've re-ordered the two
checks.

Signed-off-by: Dan Carpenter 
Reviewed-by: Jarkko Sakkinen 
Signed-off-by: Jarkko Sakkinen

tpm: fix the type of owned field in cap_t

2017-02-03T20:03:14+00:00

In cap_t the size of the type bool is assumed to be one byte. This
commit sorts out the issue by changing the type to u8.

Fixes: c659af78eb7b ("tpm: Check size of response before accessing data")
Signed-off-by: Stefan Berger 
Reviewed-by: Jarkko Sakkinen 
Signed-off-by: Jarkko Sakkinen

tpm: add securityfs support for TPM 2.0 firmware event log

2017-02-03T20:03:14+00:00

Unlike the device driver support for TPM 1.2, the TPM 2.0 does
not support the securityfs pseudo files for displaying the
firmware event log.

This patch enables support for providing the TPM 2.0 event log in
binary form. TPM 2.0 event log supports a crypto agile format that
records multiple digests, which is different from TPM 1.2. This
patch enables the tpm_bios_log_setup for TPM 2.0  and adds the
event log parser which understand the TPM 2.0 crypto agile format.

Signed-off-by: Nayna Jain 
Reviewed-by: Jarkko Sakkinen 
Tested-by: Kenneth Goldman 
Tested-by: Stefan Berger 
Signed-off-by: Jarkko Sakkinen

tpm: enhance read_log_of() to support Physical TPM event log

2017-02-03T20:03:14+00:00

Physical TPMs use Open Firmware Device Tree bindings that are similar
to the IBM Power virtual TPM to support event log. However, these
properties store the values in different endianness for Physical
and Virtual TPM.

This patch fixes the endianness issue by doing appropriate conversion
based on Physical or Virtual TPM.

Signed-off-by: Nayna Jain 
Reviewed-by: Jarkko Sakkinen 
Tested-by: Kenneth Goldman 
Signed-off-by: Jarkko Sakkinen

tpm: enhance TPM 2.0 PCR extend to support multiple banks

2017-02-03T20:03:14+00:00

The current TPM 2.0 device driver extends only the SHA1 PCR bank
but the TCG Specification[1] recommends extending all active PCR
banks, to prevent malicious users from setting unused PCR banks with
fake measurements and quoting them.

The existing in-kernel interface(tpm_pcr_extend()) expects only a
SHA1 digest.  To extend all active PCR banks with differing
digest sizes, the SHA1 digest is padded with trailing 0's as needed.

This patch reuses the defined digest sizes from the crypto subsystem,
adding a dependency on CRYPTO_HASH_INFO module.

[1] TPM 2.0 Specification referred here is "TCG PC Client Specific
Platform Firmware Profile for TPM 2.0"

Signed-off-by: Nayna Jain 
Reviewed-by: Jarkko Sakkinen 
Tested-by: Jarkko Sakkinen 
Tested-by: Kenneth Goldman 
Signed-off-by: Jarkko Sakkinen