public inbox for u-boot@lists.denx.de
 help / color / mirror / Atom feed
* [PATCH] tpm2: ftpm: open session with privileged ree login
@ 2022-12-07 15:25 Etienne Carriere
  2022-12-12 22:26 ` Ilias Apalodimas
  0 siblings, 1 reply; 2+ messages in thread
From: Etienne Carriere @ 2022-12-07 15:25 UTC (permalink / raw)
  To: u-boot; +Cc: Ilias Apalodimas, Etienne Carriere

Opens the fTPM session with TEE_LOGIN_REE_KERNEL as fTPM may restrict
access to that login when Linux based OS is running as applications are
expected to got through the Linux TPMv2 driver.

Signed-off-by: Etienne Carriere <etienne.carriere@linaro.org>
---
 drivers/tpm/tpm2_ftpm_tee.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/drivers/tpm/tpm2_ftpm_tee.c b/drivers/tpm/tpm2_ftpm_tee.c
index 53e59f42b4..3c4c12983d 100644
--- a/drivers/tpm/tpm2_ftpm_tee.c
+++ b/drivers/tpm/tpm2_ftpm_tee.c
@@ -186,6 +186,7 @@ static int ftpm_tee_probe(struct udevice *dev)
 
 	/* Open a session with the fTPM TA */
 	memset(&sess_arg, 0, sizeof(sess_arg));
+	sess_arg.clnt_login = TEE_LOGIN_REE_KERNEL;
 	tee_optee_ta_uuid_to_octets(sess_arg.uuid, &uuid);
 
 	rc = tee_open_session(context->tee_dev, &sess_arg, 0, NULL);
-- 
2.25.1


^ permalink raw reply related	[flat|nested] 2+ messages in thread

* Re: [PATCH] tpm2: ftpm: open session with privileged ree login
  2022-12-07 15:25 [PATCH] tpm2: ftpm: open session with privileged ree login Etienne Carriere
@ 2022-12-12 22:26 ` Ilias Apalodimas
  0 siblings, 0 replies; 2+ messages in thread
From: Ilias Apalodimas @ 2022-12-12 22:26 UTC (permalink / raw)
  To: Etienne Carriere; +Cc: u-boot

On Wed, Dec 07, 2022 at 04:25:33PM +0100, Etienne Carriere wrote:
> Opens the fTPM session with TEE_LOGIN_REE_KERNEL as fTPM may restrict
> access to that login when Linux based OS is running as applications are
> expected to got through the Linux TPMv2 driver.
>
> Signed-off-by: Etienne Carriere <etienne.carriere@linaro.org>
> ---
>  drivers/tpm/tpm2_ftpm_tee.c | 1 +
>  1 file changed, 1 insertion(+)
>
> diff --git a/drivers/tpm/tpm2_ftpm_tee.c b/drivers/tpm/tpm2_ftpm_tee.c
> index 53e59f42b4..3c4c12983d 100644
> --- a/drivers/tpm/tpm2_ftpm_tee.c
> +++ b/drivers/tpm/tpm2_ftpm_tee.c
> @@ -186,6 +186,7 @@ static int ftpm_tee_probe(struct udevice *dev)
>
>  	/* Open a session with the fTPM TA */
>  	memset(&sess_arg, 0, sizeof(sess_arg));
> +	sess_arg.clnt_login = TEE_LOGIN_REE_KERNEL;
>  	tee_optee_ta_uuid_to_octets(sess_arg.uuid, &uuid);
>
>  	rc = tee_open_session(context->tee_dev, &sess_arg, 0, NULL);
> --
> 2.25.1
>

Reviewed-by: Ilias Apalodimas <ilias.apalodimas@linaro.org>


^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2022-12-12 22:27 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2022-12-07 15:25 [PATCH] tpm2: ftpm: open session with privileged ree login Etienne Carriere
2022-12-12 22:26 ` Ilias Apalodimas

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox