secure_boot.c 1.3 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364
  1. // SPDX-License-Identifier: GPL-2.0
  2. /*
  3. * Copyright (C) 2019 IBM Corporation
  4. * Author: Nayna Jain
  5. */
  6. #include <linux/types.h>
  7. #include <linux/of.h>
  8. #include <asm/secure_boot.h>
  9. static struct device_node *get_ppc_fw_sb_node(void)
  10. {
  11. static const struct of_device_id ids[] = {
  12. { .compatible = "ibm,secureboot", },
  13. { .compatible = "ibm,secureboot-v1", },
  14. { .compatible = "ibm,secureboot-v2", },
  15. {},
  16. };
  17. return of_find_matching_node(NULL, ids);
  18. }
  19. bool is_ppc_secureboot_enabled(void)
  20. {
  21. struct device_node *node;
  22. bool enabled = false;
  23. u32 secureboot;
  24. node = get_ppc_fw_sb_node();
  25. enabled = of_property_read_bool(node, "os-secureboot-enforcing");
  26. of_node_put(node);
  27. if (enabled)
  28. goto out;
  29. if (!of_property_read_u32(of_root, "ibm,secure-boot", &secureboot))
  30. enabled = (secureboot > 1);
  31. out:
  32. pr_info("Secure boot mode %s\n", enabled ? "enabled" : "disabled");
  33. return enabled;
  34. }
  35. bool is_ppc_trustedboot_enabled(void)
  36. {
  37. struct device_node *node;
  38. bool enabled = false;
  39. u32 trustedboot;
  40. node = get_ppc_fw_sb_node();
  41. enabled = of_property_read_bool(node, "trusted-enabled");
  42. of_node_put(node);
  43. if (enabled)
  44. goto out;
  45. if (!of_property_read_u32(of_root, "ibm,trusted-boot", &trustedboot))
  46. enabled = (trustedboot > 0);
  47. out:
  48. pr_info("Trusted boot mode %s\n", enabled ? "enabled" : "disabled");
  49. return enabled;
  50. }