Re: [PATCH] tpm2: ftpm: open session with privileged ree login

[Ilias Apalodimas <ilias.apalodimas@linaro.org>]

On Wed, Dec 07, 2022 at 04:25:33PM +0100, Etienne Carriere wrote:
> Opens the fTPM session with TEE_LOGIN_REE_KERNEL as fTPM may restrict
> access to that login when Linux based OS is running as applications are
> expected to got through the Linux TPMv2 driver.
>
> Signed-off-by: Etienne Carriere <etienne.carriere@linaro.org>
> ---
>  drivers/tpm/tpm2_ftpm_tee.c | 1 +
>  1 file changed, 1 insertion(+)
>
> diff --git a/drivers/tpm/tpm2_ftpm_tee.c b/drivers/tpm/tpm2_ftpm_tee.c
> index 53e59f42b4..3c4c12983d 100644
> --- a/drivers/tpm/tpm2_ftpm_tee.c
> +++ b/drivers/tpm/tpm2_ftpm_tee.c
> @@ -186,6 +186,7 @@ static int ftpm_tee_probe(struct udevice *dev)
>
>  	/* Open a session with the fTPM TA */
>  	memset(&sess_arg, 0, sizeof(sess_arg));
> +	sess_arg.clnt_login = TEE_LOGIN_REE_KERNEL;
>  	tee_optee_ta_uuid_to_octets(sess_arg.uuid, &uuid);
>
>  	rc = tee_open_session(context->tee_dev, &sess_arg, 0, NULL);
> --
> 2.25.1
>

Reviewed-by: Ilias Apalodimas <ilias.apalodimas@linaro.org>