From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from CO1PR03CU002.outbound.protection.outlook.com (mail-westus2azon11010063.outbound.protection.outlook.com [52.101.46.63]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id CE6EF40F75A; Fri, 2 Oct 2026 23:32:01 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=fail smtp.client-ip=52.101.46.63 ARC-Seal:i=2; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1790983925; cv=fail; b=SICgCFf6j7lN9rVLS9q+sWJEmt5yQErrAdtdl/7ONoOJll2RAwuf35XlALnCcnKGnOd9lhyEu0ttOleNqhtjyb70W9IXc2eZjXcNNjr/uMMddVZ0UMRIhjh+j7El/R+uIEs3PLgUJC00WJm8zEeDZuXcwv1kb3gy7rESRKTZ5Io= ARC-Message-Signature:i=2; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1790983925; c=relaxed/simple; bh=O2Pf+sdZyTDkZKMnKFIlXymcyX1HrSw69CmZAQxkQn0=; h=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References: Content-Type:MIME-Version; b=R1cy0ldYiXTd0ztjRh5bPB1DZ99427cVC5/+rGQoAZuG5UOC4lSQnBQ78PdBbAzDSrsDCU+U+YRCYT+zDDPNJm9+/yVPwxME6hB+vdazrETPQ0aqZXOVa/hWNBOEIPIODT10ngSOJ8ow0By3oJV1iu8pGeuFQjMZFuyWH8beYso= ARC-Authentication-Results:i=2; smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=nvidia.com; spf=fail smtp.mailfrom=nvidia.com; dkim=pass (2048-bit key) header.d=Nvidia.com header.i=@Nvidia.com header.b=bx/SpZYw; arc=fail smtp.client-ip=52.101.46.63 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=nvidia.com Authentication-Results: smtp.subspace.kernel.org; spf=fail smtp.mailfrom=nvidia.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=Nvidia.com header.i=@Nvidia.com header.b="bx/SpZYw" ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=g6yYV6ypzYcRWW6TtxAz5/f/nZ06Syjn5dDzqf+6nGxJueAqe1SA01RK+xEBfOWLFb+nD1HBLm+BLCo9D/01qNKrcK0tSovredwQ9OHAPiW0GYY74n+eqCPFSVM4k4klLeIiIAOqAj7K4wT9FKBVHig41WJA1dMJl2YkJk0sH5eq+lxI4ugpkCuLAOXADq0i7cWuMNUvXKdMEIB7IDoWwdHrRZYzgTIWEpTLUXlHI77sgxVgunfzjHrjkF1cXkrUFTvhd4qaLoL+qbqsE6dQoXtgdF/c6RyMWDGPHOgDkC4T7zPEbJhzocSKbYCpxj4qfgkJq/XL0RCdXdPi1T5GoA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=SxOPE6m3XrpP1DNbo4t/csrkRcFwu3gU8cjN8Wtwkv4=; b=kldGnRtheLy+/2+kN2Kj7zVV6ZT1A6doAmzT1z5D/VR/EV6wjkiHcoLhCBfsljuCzHEN8K69U5KCNx87+wwJnS47Y42AxmokVyFj8H+iDAsU+ENGETnR50vcf7VbZQzUnoY60UG5gKqeawbh8bNnN5dpGYHvoAFqx/HWxQh3mbpIvrDUxCJYMYw/FHHulQe3RGS37Gl1dJIG2HLmz6qugwTDvZs8kdTOcTuMmAI3aRVD2Ktd9qqPL/cIopjA2aLyAoXiMNWJZtHFcNfmy8i9R11KNai78z0BdKabrFrYhZKre8WZUYKcF92iejMCtKC54zSe9wUdiTGqdJmArH2hTA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=nvidia.com; dmarc=pass action=none header.from=nvidia.com; dkim=pass header.d=nvidia.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=Nvidia.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=SxOPE6m3XrpP1DNbo4t/csrkRcFwu3gU8cjN8Wtwkv4=; b=bx/SpZYwAvPoCxwmxzFwo+8B8+X1hy+3iJ2Hfykj60ab0xa7HDgABYprJzA1BG9UvYJ9w0zYIGXRdsR2ZLFKQyiNf6caIP3Ivqss+cdFUAPx0Y0tYU90F6EKoJnkx2/qAP+g0mLsqX+EDGtNwhlF6tlbypA60SkP/+zcPNdmDpWYn8xtVzLqvBhVqg/dQGYLjCIVMJWuKP4b2txUHB4kU2XZ1eai31XqZ+v5Ucovy75PcY1UVQnlVKCWf2bexx05R4qbqRdcuq4MlDtNExQaQgQwzksWREgp6ftK9tH9qnf9uXhb5Di0mD61vafP3LWFqpOXVL95c6OZeCd5cl43jg== Authentication-Results: mx.microsoft.com 1; dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=nvidia.com; Received: from LY0PR12MB325698.namprd12.prod.outlook.com (2603:10b6:408:3bb::14) by PH7PR12MB5830.namprd12.prod.outlook.com (2603:10b6:510:1d5::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.451.24; Fri, 2 Oct 2026 23:31:55 +0000 Received: from LY0PR12MB325698.namprd12.prod.outlook.com ([fe80::b65f:1548:5b35:e2b5]) by LY0PR12MB325698.namprd12.prod.outlook.com ([fe80::b65f:1548:5b35:e2b5%5]) with mapi id 15.21.0472.016; Fri, 2 Oct 2026 23:31:55 +0000 From: Jason Gunthorpe To: Alexandre Ghiti , Albert Ou , Ard Biesheuvel , Arnd Bergmann , Catalin Marinas , Jonathan Corbet , David Sterba , Ilias Apalodimas , linux-arch@vger.kernel.org, linux-arm-kernel@lists.infradead.org, linux-doc@vger.kernel.org, linux-efi@vger.kernel.org, linux-riscv@lists.infradead.org, Mark Rutland , Palmer Dabbelt , Paul Walmsley , Randy Dunlap , Simon Glass , Shuah Khan , Nick Terrell , Will Deacon Cc: Alexandre Ghiti , Conor Dooley , Jonathan Cameron , linux-integrity@vger.kernel.org, Palmer Dabbelt , patches@lists.linux.dev, =?utf-8?q?Piotr_Kr=C3=B3l?= , Ross Philipson , Sami Tolvanen , Song Shuai Subject: [PATCH v2 10/15] efi/libstub: Put the stub's writable data in unique sections for DRTM Date: Fri, 2 Oct 2026 20:31:47 -0300 Message-ID: <10-v2-989a18390eb1+486-arm64_drtm_jgg@nvidia.com> In-Reply-To: <0-v2-989a18390eb1+486-arm64_drtm_jgg@nvidia.com> References: Content-Transfer-Encoding: 8bit Content-Type: text/plain X-ClientProxiedBy: PH0PR07CA0090.namprd07.prod.outlook.com (2603:10b6:510:f::35) To LY0PR12MB325698.namprd12.prod.outlook.com (2603:10b6:408:3bb::14) Precedence: bulk X-Mailing-List: linux-doc@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: LY0PR12MB325698:EE_|PH7PR12MB5830:EE_ X-MS-Office365-Filtering-Correlation-Id: 55635f9c-98b9-4f40-1d00-08df20dd57ea X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|7416014|366016|1800799024|23010399003|376014|10067099003|11063799006|6133799003|921020|3023799007|56012099006|22082099003|18002099003; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:LY0PR12MB325698.namprd12.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(7416014)(366016)(1800799024)(23010399003)(376014)(10067099003)(11063799006)(6133799003)(921020)(3023799007)(56012099006)(22082099003)(18002099003);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?YnTUIcYh5JjahHbjNUT/L2OECcFLPSUyBm0uu9KB3voYj0PUp6NZWvYYU8Eu?= =?us-ascii?Q?eIh+oIX7gLm39fzksOKm3vj+GF9BFPR9hFxeLM//XwajDQhlTFy6r4ribSoW?= =?us-ascii?Q?yUceMPvk3A/0HjTeD8dNymKTuXWKqloBPsCQqDa69x0ZqY5gEcCIU1KZBAtb?= =?us-ascii?Q?U47eOIU+uG6hNA0oqFf8rfBL09rsu6qeA2arHieAG+Z4wF31x9qJYMk8GJQZ?= =?us-ascii?Q?9mxwvEkIp0pviU6n8tiULbxeJG9YpYX6u9jwEKKAd+c+FPkg4xN/ltaODGD7?= =?us-ascii?Q?Wm9OZuqv7dHVn2RlGugnf13/j+OnW9EEoM1GZClxMKwF5otqJwUFOAIFySaW?= =?us-ascii?Q?cb70UjeUf95FRas4z4nvzeKR79fLVPiS0CDS+OykYnNiY0JE99w1uATtpAQe?= =?us-ascii?Q?1XBnKSzVrgXk8v39cWbV6jYYe5r1EMxdEgN78zzdqa2f9xAIjDq6SQluHQMB?= =?us-ascii?Q?EK7xiZYdKIzBt9jK5D99xT+ZquOWg+U6/3huonQq3+Ah64rNhS2uug/oTIPZ?= =?us-ascii?Q?7eVzWL++ht57jdsVjpnMuDsbUTB3P2ILWDMveLK5UXEERJ1ALUjozGzTCCXh?= =?us-ascii?Q?Q9fM99QqWjt8Qil8TK7DY1xRvwu5KaEVOEw71wt6nhXCIlKD/098fEJgwvCx?= =?us-ascii?Q?gm5g5Y6QAGoWrRKryb2bcubNva0vWbFE273l/+Fd89aRj8CmrWhc/2ruMa/5?= =?us-ascii?Q?qT9BlKNL5KL9DSK/KZi4nQYkj9ydwa+pHvAnhnn3WmtBEDRz9n3gv7cpQzlf?= =?us-ascii?Q?S/Fb67MX1/80u4WbKwvOpS5oqZcXsSPUEfzIfumGJsizt1szqn5GBmGc7d1M?= =?us-ascii?Q?vvOMu1RbbZcuTKO4cSzXcVoML5g+xM++MtxvzVjv5iOJVrj1MjMjyyJyDPAb?= =?us-ascii?Q?5eLrxXWstWiVGEuZtyYiZiFalS2aLXtXm0Ah2WVZCYDIkIJ7Dehls0YKvmBt?= =?us-ascii?Q?dRb5Wu4TEchCn83tqtrW2UDI2xtsnkeeEbYATvcVE3qwmPblok+FsQB/e+SI?= =?us-ascii?Q?HRTcJzeW2rtBpLmWj+2/uYMiwj1EWRn6XpJ8qpYhnQvWpg06ci/lTc3FFiby?= =?us-ascii?Q?XAhcfpAP3LtcLAYNjv1pw0HrpjVL3QnxWqcBkXKElqeN9xGMiygxHxX+5tC4?= =?us-ascii?Q?eroqqbI37I8gYVa3FtTblenaDCg2WGUiXugG/b+0r8IGKG/6DUTDSZfCQvwj?= =?us-ascii?Q?5gSwqhChaAczFuY6dvDeSClXc+fAsx9uWXsMLU3Pib4LK96jPZFC2QlssPyP?= =?us-ascii?Q?r9slSL308bA3fjxOBErXtcrWgDkxcGuzNGtvnTFieF0NZIaSwBFUI83f4xxb?= =?us-ascii?Q?9f1I9R2cdVvewWGjh8TY3/3H9YyslfSczAQcBR3DjNFU9iMNuGS2IZl5Gvgh?= =?us-ascii?Q?XZGhmDvShz1T/1LNfvUhpO3sP3xOdss5J4pLLWlSG46LFniERdeFhe+47Tyd?= =?us-ascii?Q?AMjt5rFCPjt7FE6GLzj8kXQe6tJntYZQSF2eyXQiRT4uwQj3Xgs2yhaszP+d?= =?us-ascii?Q?kx39ouUkeuoBKOS0NyXWaeqBDZMo9+c6oyYaprkZ/cO8QIOKtZqYSYMIzNHI?= =?us-ascii?Q?Nkufnq5+DCFJDPPwhAE5fzzwLSUFUZa+CJPz7TRu5FOhl+JdY8rcChEg1vcZ?= =?us-ascii?Q?LsnD2bW7p2bZ3jyvMxd1pedqaxYB4dy7KgWeOSAB0c8yT0XmVHL+zegrFnz1?= =?us-ascii?Q?LcwBl08Otfzx8z5qvT2N0n0HGGY08wwh5VMYBYee3UORc0Pa?= X-OriginatorOrg: Nvidia.com X-MS-Exchange-CrossTenant-Network-Message-Id: 55635f9c-98b9-4f40-1d00-08df20dd57ea X-MS-Exchange-CrossTenant-AuthSource: LY0PR12MB325698.namprd12.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 02 Oct 2026 23:31:54.5980 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 43083d15-7273-40c1-b7db-39efd9ccc17a X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: VqJw3RqOl0XjmlbVDmYif98RlMgmqPmdcysoXJtaotymobE2rDeWMjodLUbhnB84 X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH7PR12MB5830 Currently the EFI stub's .bss and .data are both placed in .init.data, which allows them to be discarded after boot, but places them within the region of memory we need to measure as part of a DRTM launch. If the EFI stub modifies the measured data before the measurement, then we can no longer get a predictable measurement. Give them unique section names; the arch's linker script has to put these sections outside the measured range. Signed-off-by: Jason Gunthorpe --- drivers/firmware/efi/libstub/Makefile | 10 ++++++++++ drivers/firmware/efi/libstub/zboot.lds | 2 +- 2 files changed, 11 insertions(+), 1 deletion(-) diff --git a/drivers/firmware/efi/libstub/Makefile b/drivers/firmware/efi/libstub/Makefile index 77a2b2d74f3f62..3f1921e6c334d1 100644 --- a/drivers/firmware/efi/libstub/Makefile +++ b/drivers/firmware/efi/libstub/Makefile @@ -142,6 +142,16 @@ STUBCOPY_FLAGS-$(CONFIG_ARM64) += --prefix-alloc-sections=.init \ --prefix-symbols=__efistub_ STUBCOPY_RELOC-$(CONFIG_ARM64) := R_AARCH64_ABS +# Give writable stub state a dedicated section namespace. objcopy applies +# section renames before section prefixes, irrespective of their command line +# ordering, so these become .init.efidata and .init.efibss. +# +# The names must stay outside the .init.data.* namespace. INIT_DATA collects +# *(.init.data .init.data.*) into a measured kernel output section that the +# arm64 linker script emits first. +STUBCOPY_FLAGS-$(CONFIG_EFI_STUB_DRTM) += --rename-section .data=.efidata \ + --rename-section .bss=.efibss,load,alloc + # For RISC-V, we don't need anything special other than arm64. Keep all the # symbols in .init section and make sure that no absolute symbols references # exist. diff --git a/drivers/firmware/efi/libstub/zboot.lds b/drivers/firmware/efi/libstub/zboot.lds index 8d32be32931494..568b9ce4857f43 100644 --- a/drivers/firmware/efi/libstub/zboot.lds +++ b/drivers/firmware/efi/libstub/zboot.lds @@ -38,7 +38,7 @@ SECTIONS .data : ALIGN(4096) { _data = .; - *(.data* .init.data*) + *(.data* .init.data* .init.efidata* .init.efibss*) _edata = ALIGN(512); . = _edata; } -- 2.43.0