From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id 2314BC83F03 for ; Wed, 9 Jul 2025 11:51:10 +0000 (UTC) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1uZTJ5-0007BN-Bw; Wed, 09 Jul 2025 07:49:50 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1uZTIR-0006ID-Su for grub-devel@gnu.org; Wed, 09 Jul 2025 07:49:09 -0400 Received: from mx0a-001b2d01.pphosted.com ([148.163.156.1]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1uZTIP-0006x5-Cm for grub-devel@gnu.org; Wed, 09 Jul 2025 07:49:07 -0400 Received: from pps.filterd (m0356517.ppops.net [127.0.0.1]) by mx0a-001b2d01.pphosted.com (8.18.1.2/8.18.1.2) with ESMTP id 5699tB4r025920; Wed, 9 Jul 2025 11:49:01 GMT DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ibm.com; h=cc :content-transfer-encoding:date:from:in-reply-to:message-id :mime-version:references:subject:to; s=pp1; bh=Fe4OlzX1oJd+5l0/O 58r8RQ1BB4w5+DqljxuTg1ntAo=; b=SjPyyYfpB0BAk45vBpLyFPtx11lxJNkPh uFkefr5AFYqPncdtwIM1bOMlkRtCk0uS5DA/JecdOWEvzQLdnSHXpzm1o6wOr2ip dIQuj5RsBbfRawUpb4lSwfFLtf6fDTtqTz9bY92zFLgXTK9AI5CyURTncfMCpZ32 s+FxCsWx/t0L/YnBODP/ZdWJA84VM0epAGjrSfwl4grDD44seeCvsgtEfsOjvkQ/ LcgtK6RKJ7sN/xFbBu0yStkU9cWgjA0Wg0jVuSFqGDhuPTOpAl0RNTrNy8TVlXNq AnB5hpagUzHu6fq5Og6cErRV0Zz54h7Zx2YG7U1iro6xhEu4FAIRw== Received: from ppma22.wdc07v.mail.ibm.com (5c.69.3da9.ip4.static.sl-reverse.com [169.61.105.92]) by mx0a-001b2d01.pphosted.com (PPS) with ESMTPS id 47puss61pd-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Wed, 09 Jul 2025 11:49:00 +0000 (GMT) Received: from pps.filterd (ppma22.wdc07v.mail.ibm.com [127.0.0.1]) by ppma22.wdc07v.mail.ibm.com (8.18.1.2/8.18.1.2) with ESMTP id 569AQeIr010826; Wed, 9 Jul 2025 11:48:59 GMT Received: from smtprelay07.fra02v.mail.ibm.com ([9.218.2.229]) by ppma22.wdc07v.mail.ibm.com (PPS) with ESMTPS id 47qes08576-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Wed, 09 Jul 2025 11:48:59 +0000 Received: from smtpav07.fra02v.mail.ibm.com (smtpav07.fra02v.mail.ibm.com [10.20.54.106]) by smtprelay07.fra02v.mail.ibm.com (8.14.9/8.14.9/NCO v10.0) with ESMTP id 569BmtjG29098492 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Wed, 9 Jul 2025 11:48:55 GMT Received: from smtpav07.fra02v.mail.ibm.com (unknown [127.0.0.1]) by IMSVA (Postfix) with ESMTP id A985020043; Wed, 9 Jul 2025 11:48:55 +0000 (GMT) Received: from smtpav07.fra02v.mail.ibm.com (unknown [127.0.0.1]) by IMSVA (Postfix) with ESMTP id 1E67220040; Wed, 9 Jul 2025 11:48:53 +0000 (GMT) Received: from localhost.localdomain (unknown [9.39.27.9]) by smtpav07.fra02v.mail.ibm.com (Postfix) with ESMTP; Wed, 9 Jul 2025 11:48:52 +0000 (GMT) From: Sudhakar Kuppusamy To: grub-devel@gnu.org Cc: jan.setjeeilers@oracle.com, julian.klode@canonical.com, mate.kukri@canonical.com, pjones@redhat.com, msuchanek@suse.com, mlewando@redhat.com, nayna@linux.ibm.com, ltcgcw@linux.vnet.ibm.com, ssrish@linux.ibm.com, stefanb@linux.ibm.com, avnish@linux.ibm.com, Daniel Axtens , Sudhakar Kuppusamy , Daniel Kiper Subject: [PATCH v4 15/23] ieee1275: Enter lockdown based on /ibm,secure-boot Date: Wed, 9 Jul 2025 17:15:32 +0530 Message-Id: <20250709114540.58608-16-sudhakar@linux.ibm.com> X-Mailer: git-send-email 2.39.5 (Apple Git-154) In-Reply-To: <20250709114540.58608-1-sudhakar@linux.ibm.com> References: <20250709114540.58608-1-sudhakar@linux.ibm.com> MIME-Version: 1.0 X-TM-AS-GCONF: 00 X-Authority-Analysis: v=2.4 cv=Vaj3PEp9 c=1 sm=1 tr=0 ts=686e572d cx=c_pps a=5BHTudwdYE3Te8bg5FgnPg==:117 a=5BHTudwdYE3Te8bg5FgnPg==:17 a=Wb1JkmetP80A:10 a=JuTF4qcAAAAA:8 a=VnNF1IyMAAAA:8 a=yPCof4ZbAAAA:8 a=hag4-4xlV5akHrubKOcA:9 a=WlT8qwTXB_Kj6um4hl3b:22 X-Proofpoint-GUID: -su6NpG7HGpEnBjA2swPrt0cpoiPgCqH X-Proofpoint-ORIG-GUID: -su6NpG7HGpEnBjA2swPrt0cpoiPgCqH X-Proofpoint-Spam-Details-Enc: AW1haW4tMjUwNzA5MDEwNiBTYWx0ZWRfX4zAjOMiyIJ6k ZgL7LEVtS//8mw0uitl2FEwpiQKuiVe/MhIRRA+DRG7BzDnxHdexTKlc9Ypc3JyXMoSg0VZpSod 5pOYgxJwRz2vezEwgU8VlpcYN4l0mDcHtoZ+fTixrN51BOPz1GeA4tOZEJDYCusdNDOPySQQRNy BrdMxBopkizlNyjcR3oGv5kHdeGGbJ/jN5Sd4J98bRmfRRnUx8vDVkePnli7jpcnGlS18BSRQt2 gfYMC3rvd54NJ+iOacEGkKsNgKD7oZDbP+g8iX5D0LhuIfNAJXiQUEjjm34gyrOwVG5aTTScnx5 TdaLzDMhSmeIVupudjOGIx24+IGpT9DUz8i1iexAEOUfmDwylbjSzmn2qxtOhcJJYk6seWoRWDL cGlPxAcs1i1m6pPOLgcW0iBH5nKZWsS74EJPduS6Kok6u/r1TBb2oBuCX6oMzMb4a14CUjeq X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.293,Aquarius:18.0.1099,Hydra:6.1.7,FMLib:17.12.80.40 definitions=2025-07-09_02,2025-07-08_01,2025-03-28_01 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 priorityscore=1501 mlxlogscore=999 suspectscore=0 clxscore=1015 adultscore=0 lowpriorityscore=0 impostorscore=0 malwarescore=0 bulkscore=0 mlxscore=0 spamscore=0 phishscore=0 classifier=spam authscore=0 authtc=n/a authcc= route=outbound adjust=0 reason=mlx scancount=1 engine=8.19.0-2505280000 definitions=main-2507090106 Received-SPF: pass client-ip=148.163.156.1; envelope-from=sudhakar@linux.ibm.com; helo=mx0a-001b2d01.pphosted.com X-Spam_score_int: -26 X-Spam_score: -2.7 X-Spam_bar: -- X-Spam_report: (-2.7 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: grub-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: The development of GNU GRUB List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: The development of GNU GRUB Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: grub-devel-bounces+grub-devel=archiver.kernel.org@gnu.org Sender: grub-devel-bounces+grub-devel=archiver.kernel.org@gnu.org RnJvbTogRGFuaWVsIEF4dGVucyA8ZGphQGF4dGVucy5uZXQ+CgpJZiB0aGUgJ2libSxzZWN1cmUt Ym9vdCcgcHJvcGVydHkgb2YgdGhlIHJvb3Qgbm9kZSBpcyAyIG9yIGdyZWF0ZXIsCmVudGVyIGxv Y2tkb3duLgoKU2lnbmVkLW9mZi1ieTogRGFuaWVsIEF4dGVucyA8ZGphQGF4dGVucy5uZXQ+ClNp Z25lZC1vZmYtYnk6IFN1ZGhha2FyIEt1cHB1c2FteSA8c3VkaGFrYXJAbGludXguaWJtLmNvbT4K UmV2aWV3ZWQtYnk6IFN0ZWZhbiBCZXJnZXIgPHN0ZWZhbmJAbGludXguaWJtLmNvbT4KUmV2aWV3 ZWQtYnk6IEF2bmlzaCBDaG91aGFuIDxhdm5pc2hAbGludXguaWJtLmNvbT4KUmV2aWV3ZWQtYnk6 IERhbmllbCBLaXBlciA8ZGFuaWVsLmtpcGVyQG9yYWNsZS5jb20+Ci0tLQogZG9jcy9ncnViLnRl eGkgICAgICAgICAgICAgICAgIHwgIDIgKy0KIGdydWItY29yZS9NYWtlZmlsZS5jb3JlLmRlZiAg ICB8ICAxICsKIGdydWItY29yZS9rZXJuL2llZWUxMjc1L2luaXQuYyB8IDQyICsrKysrKysrKysr KysrKysrKysrKysrKysrKysrKysrKysKIGluY2x1ZGUvZ3J1Yi9sb2NrZG93bi5oICAgICAgICB8 ICAzICsrLQogNCBmaWxlcyBjaGFuZ2VkLCA0NiBpbnNlcnRpb25zKCspLCAyIGRlbGV0aW9ucygt KQoKZGlmZiAtLWdpdCBhL2RvY3MvZ3J1Yi50ZXhpIGIvZG9jcy9ncnViLnRleGkKaW5kZXggY2Zh NWQ1YzBiLi42NzkzMGY2M2QgMTAwNjQ0Ci0tLSBhL2RvY3MvZ3J1Yi50ZXhpCisrKyBiL2RvY3Mv Z3J1Yi50ZXhpCkBAIC05MDYwLDcgKzkwNjAsNyBAQCBwbGF0Zm9ybXMuCiBAc2VjdGlvbiBMb2Nr ZG93biB3aGVuIGJvb3Rpbmcgb24gYSBzZWN1cmUgc2V0dXAKIAogVGhlIEdSVUIgY2FuIGJlIGxv Y2tlZCBkb3duIHdoZW4gYm9vdGVkIG9uIGEgc2VjdXJlIGJvb3QgZW52aXJvbm1lbnQsIGZvciBl eGFtcGxlCi1pZiB0aGUgVUVGSSBzZWN1cmUgYm9vdCBpcyBlbmFibGVkLiBPbiBhIGxvY2tlZCBk b3duIGNvbmZpZ3VyYXRpb24sIHRoZSBHUlVCIHdpbGwKK2lmIHRoZSBVRUZJIG9yIFBvd2VyIHNl Y3VyZSBib290IGlzIGVuYWJsZWQuIE9uIGEgbG9ja2VkIGRvd24gY29uZmlndXJhdGlvbiwgdGhl IEdSVUIgd2lsbAogYmUgcmVzdHJpY3RlZCBhbmQgc29tZSBvcGVyYXRpb25zL2NvbW1hbmRzIGNh bm5vdCBiZSBleGVjdXRlZC4gVGhpcyBhbHNvIGluY2x1ZGVzCiBsaW1pdGluZyB3aGljaCBmaWxl c3lzdGVtcyBhcmUgc3VwcG9ydGVkIHRvIHRob3NlIHRob3VnaHQgdG8gYmUgbW9yZSByb2J1c3Qg YW5kCiB3aWRlbHkgdXNlZCB3aXRoaW4gR1JVQi4KZGlmZiAtLWdpdCBhL2dydWItY29yZS9NYWtl ZmlsZS5jb3JlLmRlZiBiL2dydWItY29yZS9NYWtlZmlsZS5jb3JlLmRlZgppbmRleCA0MTEzY2Iw ZWYuLjIxNDg1NmI1YSAxMDA2NDQKLS0tIGEvZ3J1Yi1jb3JlL01ha2VmaWxlLmNvcmUuZGVmCisr KyBiL2dydWItY29yZS9NYWtlZmlsZS5jb3JlLmRlZgpAQCAtMzMxLDYgKzMzMSw3IEBAIGtlcm5l bCA9IHsKICAgcG93ZXJwY19pZWVlMTI3NSA9IGtlcm4vcG93ZXJwYy9jYWNoZS5TOwogICBwb3dl cnBjX2llZWUxMjc1ID0ga2Vybi9wb3dlcnBjL2RsLmM7CiAgIHBvd2VycGNfaWVlZTEyNzUgPSBr ZXJuL3Bvd2VycGMvY29tcGlsZXItcnQuUzsKKyAgcG93ZXJwY19pZWVlMTI3NSA9IGtlcm4vbG9j a2Rvd24uYzsKIAogICBzcGFyYzY0X2llZWUxMjc1ID0ga2Vybi9zcGFyYzY0L2NhY2hlLlM7CiAg IHNwYXJjNjRfaWVlZTEyNzUgPSBrZXJuL3NwYXJjNjQvZGwuYzsKZGlmZiAtLWdpdCBhL2dydWIt Y29yZS9rZXJuL2llZWUxMjc1L2luaXQuYyBiL2dydWItY29yZS9rZXJuL2llZWUxMjc1L2luaXQu YwppbmRleCBhNTU4NmY4NWIuLmYxOWQ1Y2RhOSAxMDA2NDQKLS0tIGEvZ3J1Yi1jb3JlL2tlcm4v aWVlZTEyNzUvaW5pdC5jCisrKyBiL2dydWItY29yZS9rZXJuL2llZWUxMjc1L2luaXQuYwpAQCAt NDksNiArNDksOSBAQAogI2lmIGRlZmluZWQoX19wb3dlcnBjX18pIHx8IGRlZmluZWQoX19pMzg2 X18pCiAjaW5jbHVkZSA8Z3J1Yi9pZWVlMTI3NS9hbGxvYy5oPgogI2VuZGlmCisjaWYgZGVmaW5l ZChfX3Bvd2VycGNfXykKKyNpbmNsdWRlIDxncnViL2xvY2tkb3duLmg+CisjZW5kaWYKIAogLyog VGhlIG1heGltdW0gaGVhcCBzaXplIHdlJ3JlIGdvaW5nIHRvIGNsYWltIGF0IGJvb3QuIE5vdCB1 c2VkIGJ5IHNwYXJjLiAqLwogI2lmZGVmIF9faTM4Nl9fCkBAIC05OTUsNiArOTk4LDQxIEBAIGdy dWJfcGFyc2VfY21kbGluZSAodm9pZCkKICAgICB9CiB9CiAKKyNpZmRlZiBfX3Bvd2VycGNfXwor c3RhdGljIHZvaWQKK2dydWJfZ2V0X2llZWUxMjc1X3NlY3VyZV9ib290ICh2b2lkKQoreworICBn cnViX2llZWUxMjc1X3BoYW5kbGVfdCByb290OworICBpbnQgcmM7CisgIGdydWJfdWludDMyX3Qg aXNfc2I7CisKKyAgcmMgPSBncnViX2llZWUxMjc1X2ZpbmRkZXZpY2UgKCIvIiwgJnJvb3QpOwor ICBpZiAocmMgIT0gMCkKKyAgICB7CisgICAgICBncnViX2Vycm9yIChHUlVCX0VSUl9VTktOT1dO X0RFVklDRSwgImNvdWxkbid0IGZpbmQgLyBub2RlIik7CisgICAgICByZXR1cm47CisgICAgfQor CisgIHJjID0gZ3J1Yl9pZWVlMTI3NV9nZXRfaW50ZWdlcl9wcm9wZXJ0eSAocm9vdCwgImlibSxz ZWN1cmUtYm9vdCIsICZpc19zYiwgc2l6ZW9mIChpc19zYiksIDApOworICBpZiAocmMgIT0gMCkK KyAgICB7CisgICAgICBncnViX2Vycm9yIChHUlVCX0VSUl9VTktOT1dOX0RFVklDRSwgImNvdWxk bid0IGV4YW1pbmUgL2libSxzZWN1cmUtYm9vdCBwcm9wZXJ0eSIpOworICAgICAgcmV0dXJuOwor ICAgIH0KKyAgLyoKKyAgICogaWJtLHNlY3VyZS1ib290OgorICAgKiAwIC0gZGlzYWJsZWQKKyAg ICogMSAtIGF1ZGl0CisgICAqIDIgLSBlbmZvcmNlCisgICAqIDMgLSBlbmZvcmNlICsgT1Mtc3Bl Y2lmaWMgYmVoYXZpb3VyCisgICAqCisgICAqIFdlIG9ubHkgc3VwcG9ydCBlbmZvcmNlLgorICAg Ki8KKyAgaWYgKGlzX3NiID49IDIpCisgICAgZ3J1Yl9sb2NrZG93biAoKTsKK30KKyNlbmRpZgor CiBncnViX2FkZHJfdCBncnViX21vZGJhc2U7CiAKIHZvaWQKQEAgLTEwMjAsNiArMTA1OCwxMCBA QCBncnViX21hY2hpbmVfaW5pdCAodm9pZCkKICNlbHNlCiAgIGdydWJfaW5zdGFsbF9nZXRfdGlt ZV9tcyAoZ3J1Yl9ydGNfZ2V0X3RpbWVfbXMpOwogI2VuZGlmCisKKyNpZmRlZiBfX3Bvd2VycGNf XworICBncnViX2dldF9pZWVlMTI3NV9zZWN1cmVfYm9vdCAoKTsKKyNlbmRpZgogfQogCiB2b2lk CmRpZmYgLS1naXQgYS9pbmNsdWRlL2dydWIvbG9ja2Rvd24uaCBiL2luY2x1ZGUvZ3J1Yi9sb2Nr ZG93bi5oCmluZGV4IDQwNTMxZmE4Mi4uZWJmZWU0YmYwIDEwMDY0NAotLS0gYS9pbmNsdWRlL2dy dWIvbG9ja2Rvd24uaAorKysgYi9pbmNsdWRlL2dydWIvbG9ja2Rvd24uaApAQCAtMjQsNyArMjQs OCBAQAogI2RlZmluZSBHUlVCX0xPQ0tET1dOX0RJU0FCTEVEICAgICAgIDAKICNkZWZpbmUgR1JV Ql9MT0NLRE9XTl9FTkFCTEVEICAgICAgICAxCiAKLSNpZmRlZiBHUlVCX01BQ0hJTkVfRUZJCisj aWYgZGVmaW5lZChHUlVCX01BQ0hJTkVfRUZJKSB8fCBcCisgICAgKGRlZmluZWQoX19wb3dlcnBj X18pICYmIGRlZmluZWQoR1JVQl9NQUNISU5FX0lFRUUxMjc1KSkKIGV4dGVybiB2b2lkCiBFWFBP UlRfRlVOQyAoZ3J1Yl9sb2NrZG93bikgKHZvaWQpOwogZXh0ZXJuIGludAotLSAKMi4zOS41IChB cHBsZSBHaXQtMTU0KQoKCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fCkdydWItZGV2ZWwgbWFpbGluZyBsaXN0CkdydWItZGV2ZWxAZ251Lm9yZwpodHRwczov L2xpc3RzLmdudS5vcmcvbWFpbG1hbi9saXN0aW5mby9ncnViLWRldmVsCg==