efi: call get_event_log before ExitBootServices
With TPM 2.0 specification, the event logs may only be accessible by calling an EFI Boot Service. Modify the EFI stub to copy the log area to a new Linux-specific EFI configuration table so it remains accessible once booted. When calling this service, it is possible to specify the expected format of the logs: TPM 1.2 (SHA1) or TPM 2.0 ("Crypto Agile"). For now, only the first format is retrieved. Signed-off-by:Thiebaud Weksteen <tweek@google.com> Reviewed-by:
Javier Martinez Canillas <javierm@redhat.com> Tested-by:
Javier Martinez Canillas <javierm@redhat.com> Tested-by:
Jarkko Sakkinen <jarkko.sakkinen@linux.intel.com> Reviewed-by:
Jarkko Sakkinen <jarkko.sakkinen@linux.intel.com> Signed-off-by:
Jarkko Sakkinen <jarkko.sakkinen@linux.intel.com>
Showing
- arch/x86/boot/compressed/eboot.c 1 addition, 0 deletionsarch/x86/boot/compressed/eboot.c
- drivers/firmware/efi/Makefile 1 addition, 1 deletiondrivers/firmware/efi/Makefile
- drivers/firmware/efi/efi.c 4 additions, 0 deletionsdrivers/firmware/efi/efi.c
- drivers/firmware/efi/libstub/Makefile 1 addition, 2 deletionsdrivers/firmware/efi/libstub/Makefile
- drivers/firmware/efi/libstub/tpm.c 81 additions, 0 deletionsdrivers/firmware/efi/libstub/tpm.c
- drivers/firmware/efi/tpm.c 40 additions, 0 deletionsdrivers/firmware/efi/tpm.c
- include/linux/efi.h 46 additions, 0 deletionsinclude/linux/efi.h
Loading
Please register or sign in to comment