mirror of https://github.com/Qortal/Brooklyn
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
64 lines
1.3 KiB
64 lines
1.3 KiB
// SPDX-License-Identifier: GPL-2.0 |
|
/* |
|
* Copyright (C) 2019 IBM Corporation |
|
* Author: Nayna Jain |
|
*/ |
|
#include <linux/types.h> |
|
#include <linux/of.h> |
|
#include <asm/secure_boot.h> |
|
|
|
static struct device_node *get_ppc_fw_sb_node(void) |
|
{ |
|
static const struct of_device_id ids[] = { |
|
{ .compatible = "ibm,secureboot", }, |
|
{ .compatible = "ibm,secureboot-v1", }, |
|
{ .compatible = "ibm,secureboot-v2", }, |
|
{}, |
|
}; |
|
|
|
return of_find_matching_node(NULL, ids); |
|
} |
|
|
|
bool is_ppc_secureboot_enabled(void) |
|
{ |
|
struct device_node *node; |
|
bool enabled = false; |
|
u32 secureboot; |
|
|
|
node = get_ppc_fw_sb_node(); |
|
enabled = of_property_read_bool(node, "os-secureboot-enforcing"); |
|
of_node_put(node); |
|
|
|
if (enabled) |
|
goto out; |
|
|
|
if (!of_property_read_u32(of_root, "ibm,secure-boot", &secureboot)) |
|
enabled = (secureboot > 1); |
|
|
|
out: |
|
pr_info("Secure boot mode %s\n", enabled ? "enabled" : "disabled"); |
|
|
|
return enabled; |
|
} |
|
|
|
bool is_ppc_trustedboot_enabled(void) |
|
{ |
|
struct device_node *node; |
|
bool enabled = false; |
|
u32 trustedboot; |
|
|
|
node = get_ppc_fw_sb_node(); |
|
enabled = of_property_read_bool(node, "trusted-enabled"); |
|
of_node_put(node); |
|
|
|
if (enabled) |
|
goto out; |
|
|
|
if (!of_property_read_u32(of_root, "ibm,trusted-boot", &trustedboot)) |
|
enabled = (trustedboot > 0); |
|
|
|
out: |
|
pr_info("Trusted boot mode %s\n", enabled ? "enabled" : "disabled"); |
|
|
|
return enabled; |
|
}
|
|
|