From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mga11.intel.com (mga11.intel.com [192.55.52.93]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ml01.01.org (Postfix) with ESMTPS id 0B2878209D for ; Tue, 7 Feb 2017 00:24:37 -0800 (PST) Received: from orsmga005.jf.intel.com ([10.7.209.41]) by fmsmga102.fm.intel.com with ESMTP; 07 Feb 2017 00:24:36 -0800 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.33,345,1477983600"; d="scan'208";a="61704875" Received: from jyao1-mobl.ccr.corp.intel.com ([10.254.21.101]) by orsmga005.jf.intel.com with ESMTP; 07 Feb 2017 00:24:36 -0800 From: Jiewen Yao To: edk2-devel@lists.01.org Cc: Qin Long , Chao Zhang Date: Tue, 7 Feb 2017 00:24:23 -0800 Message-Id: <1486455866-7896-4-git-send-email-jiewen.yao@intel.com> X-Mailer: git-send-email 2.7.4.windows.1 In-Reply-To: <1486455866-7896-1-git-send-email-jiewen.yao@intel.com> References: <1486455866-7896-1-git-send-email-jiewen.yao@intel.com> Subject: [PATCH V2 3/6] SecurityPkg/include: Add PlatformPasswordLib lib class. X-BeenThere: edk2-devel@lists.01.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: EDK II Development List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 07 Feb 2017 08:24:37 -0000 This lib is to indicate if the password is cleared. Cc: Qin Long Cc: Chao Zhang Contributed-under: TianoCore Contribution Agreement 1.0 Signed-off-by: Jiewen Yao --- SecurityPkg/Include/Library/PlatformPasswordLib.h | 54 ++++++++++++++++++++ SecurityPkg/SecurityPkg.dec | 4 ++ 2 files changed, 58 insertions(+) diff --git a/SecurityPkg/Include/Library/PlatformPasswordLib.h b/SecurityPkg/Include/Library/PlatformPasswordLib.h new file mode 100644 index 0000000..79067d2 --- /dev/null +++ b/SecurityPkg/Include/Library/PlatformPasswordLib.h @@ -0,0 +1,54 @@ +/** @file + Provides a platform-specific method to return password policy. + +Copyright (c) 2017, Intel Corporation. All rights reserved.
+This program and the accompanying materials +are licensed and made available under the terms and conditions of the BSD License +which accompanies this distribution. The full text of the license may be found at +http://opensource.org/licenses/bsd-license.php + +THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS, +WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED. + +**/ + +#ifndef __PLATFORM_PASSWORD_LIB_H__ +#define __PLATFORM_PASSWORD_LIB_H__ + +/** + This function is called at password driver entrypoint. + This function should be called only once, to clear the password. + + This function provides a way to reset the password, just in case + the platform owner forgets the password. + The platform should provide a secure way to make sure + only the platform owner is allowed to clear password. + + Once the password is cleared, the platform should provide a way + to set a new password. + + @retval TRUE There is a platform request to clear the password. + @retval FALSE There is no platform request to clear the password. +**/ +BOOLEAN +EFIAPI +IsPasswordCleared ( + VOID + ); + +/** + This function is called if the password driver finds that the password is not enrolled, + when the password is required to input. + + This function should return the action accroding to platform policy. + + @retval TRUE The caller should force the user to enroll the password. + @retval FALSE The caller may skip the password enroll. +**/ +BOOLEAN +EFIAPI +NeedEnrollPassword ( + VOID + ); + +#endif diff --git a/SecurityPkg/SecurityPkg.dec b/SecurityPkg/SecurityPkg.dec index da2f84f..7050d3e 100644 --- a/SecurityPkg/SecurityPkg.dec +++ b/SecurityPkg/SecurityPkg.dec @@ -93,6 +93,10 @@ # OpalPasswordSupportLib|Include/Library/OpalPasswordSupportLib.h + ## @libraryclass Provides a platform-specific method to return password policy. + # + PlatformPasswordLib|Include/Library/PlatformPasswordLib.h + [Guids] ## Security package token space guid. # Include/Guid/SecurityPkgTokenSpace.h -- 2.7.4.windows.1