Re: [PATCH 10/17] driver core: Expose device trust authorization through sysfs

[sashiko-bot@kernel.org]

> From: Leon Romanovsky <leonro@nvidia.com>
> 
> An initrd must authorize a disabled device after attestation even if a
> built-in driver already attempted to probe it.
> 
> Expose requested trust_policy and read-only active trust. Allow explicit
> disabled policy to advance once to adversary or full, fixing that decision
> immediately. Reject later policy changes, including for a device claimed
> before registration, while allowing same-value writes on live devices.
> Keep initial unrestricted selection separate from explicit authorization
> and bind-time commitment. Serialize writes with probing under the device
> lock. Include the attributes in device ownership changes.
> 
> Signed-off-by: Leon Romanovsky <leonro@nvidia.com>

Sashiko has reviewed this patch and found no issues.

-- 
Sashiko AI review · https://sashiko.dev/#/patchset/20261105-device-trust-core-v1-0-1e536825b4eb@nvidia.com?part=10