From: Ard Biesheuvel <ard.biesheuvel@linaro.org>
To: edk2-devel@lists.01.org
Subject: [PATCH edk2-platforms 0/7] Silicon/SynQuacer: implement SMM based secure boot
Date: Fri, 4 Jan 2019 15:43:29 +0100 [thread overview]
Message-ID: <20190104144336.8941-1-ard.biesheuvel@linaro.org> (raw)
Wire up the various pieces so that the authenticated variable store
runs entirely in standalone MM context residing in a secure partition.
This primarily involves refactoring the platform's NOR flash driver so
we can build a version that can work in the standalone MM context.
Beyond that, it is just a matter of enabling all the boilerplate in
the .DSC and .FDF files.
Note that the resulting standalone MM firmware volume needs to be
wrapped in a FIP, which is not part of the build sequence.
Cc: Leif Lindholm <leif.lindholm@linaro.org>
Cc: Masahisa Kojima <masahisa.kojima@linaro.org>
Ard Biesheuvel (7):
Silicon/SynQuacer/Fip006Dxe: drop block I/O and disk I/O routines
Silicon/SynQuacer/Fip006Dxe: factor out DXE specific pieces
Silicon/SynQuacer/Fip006Dxe: implement standalone MM variant
Silicon/SynQuacer/Fip006Dxe: use proper accessor for unaligned access
Platform/DeveloperBox: create shared .DSC include file
Platform/DeveloperBox: add .DSC/.FDF description of MM components
Platform/DeveloperBox: add MM based UEFI secure boot support
.../Socionext/DeveloperBox/DeveloperBox.dsc | 304 +---
.../DeveloperBox/DeveloperBox.dsc.inc | 315 ++++
.../Socionext/DeveloperBox/DeveloperBox.fdf | 13 +
.../Socionext/DeveloperBox/DeveloperBoxMm.dsc | 103 ++
.../Socionext/DeveloperBox/DeveloperBoxMm.fdf | 161 ++
.../SynQuacer/Drivers/Fip006Dxe/Fip006Dxe.inf | 9 +-
.../Drivers/Fip006Dxe/Fip006StandaloneMm.inf | 71 +
.../SynQuacer/Drivers/Fip006Dxe/NorFlash.c | 1006 +++++++++++++
.../Fip006Dxe/{NorFlashDxe.h => NorFlash.h} | 93 +-
.../Drivers/Fip006Dxe/NorFlashBlockIoDxe.c | 138 --
.../SynQuacer/Drivers/Fip006Dxe/NorFlashDxe.c | 1341 ++---------------
.../{NorFlashFvbDxe.c => NorFlashFvb.c} | 197 +--
.../SynQuacer/Drivers/Fip006Dxe/NorFlashSmm.c | 182 +++
13 files changed, 2076 insertions(+), 1857 deletions(-)
create mode 100644 Platform/Socionext/DeveloperBox/DeveloperBox.dsc.inc
create mode 100644 Platform/Socionext/DeveloperBox/DeveloperBoxMm.dsc
create mode 100644 Platform/Socionext/DeveloperBox/DeveloperBoxMm.fdf
create mode 100644 Silicon/Socionext/SynQuacer/Drivers/Fip006Dxe/Fip006StandaloneMm.inf
create mode 100644 Silicon/Socionext/SynQuacer/Drivers/Fip006Dxe/NorFlash.c
rename Silicon/Socionext/SynQuacer/Drivers/Fip006Dxe/{NorFlashDxe.h => NorFlash.h} (85%)
delete mode 100644 Silicon/Socionext/SynQuacer/Drivers/Fip006Dxe/NorFlashBlockIoDxe.c
rename Silicon/Socionext/SynQuacer/Drivers/Fip006Dxe/{NorFlashFvbDxe.c => NorFlashFvb.c} (76%)
create mode 100644 Silicon/Socionext/SynQuacer/Drivers/Fip006Dxe/NorFlashSmm.c
--
2.17.1
next reply other threads:[~2019-01-04 14:43 UTC|newest]
Thread overview: 24+ messages / expand[flat|nested] mbox.gz Atom feed top
2019-01-04 14:43 Ard Biesheuvel [this message]
2019-01-04 14:43 ` [PATCH edk2-platforms 1/7] Silicon/SynQuacer/Fip006Dxe: drop block I/O and disk I/O routines Ard Biesheuvel
2019-01-17 9:50 ` Leif Lindholm
2019-01-17 10:59 ` Ard Biesheuvel
2019-01-04 14:43 ` [PATCH edk2-platforms 2/7] Silicon/SynQuacer/Fip006Dxe: factor out DXE specific pieces Ard Biesheuvel
2019-01-17 10:10 ` Leif Lindholm
2019-01-17 11:27 ` Ard Biesheuvel
2019-01-21 16:16 ` Ard Biesheuvel
2019-01-21 16:46 ` Leif Lindholm
2019-01-21 16:47 ` Ard Biesheuvel
2019-01-21 16:53 ` Leif Lindholm
2019-01-04 14:43 ` [PATCH edk2-platforms 3/7] Silicon/SynQuacer/Fip006Dxe: implement standalone MM variant Ard Biesheuvel
2019-01-04 14:43 ` [PATCH edk2-platforms 4/7] Silicon/SynQuacer/Fip006Dxe: use proper accessor for unaligned access Ard Biesheuvel
2019-01-04 14:43 ` [PATCH edk2-platforms 5/7] Platform/DeveloperBox: create shared .DSC include file Ard Biesheuvel
2019-01-04 14:43 ` [PATCH edk2-platforms 6/7] Platform/DeveloperBox: add .DSC/.FDF description of MM components Ard Biesheuvel
2019-01-17 11:04 ` Leif Lindholm
2019-01-17 11:10 ` Ard Biesheuvel
2019-01-17 12:08 ` Leif Lindholm
2019-01-17 12:18 ` Ard Biesheuvel
2019-01-21 16:57 ` Ard Biesheuvel
2019-01-21 17:03 ` Leif Lindholm
2019-01-04 14:43 ` [PATCH edk2-platforms 7/7] Platform/DeveloperBox: add MM based UEFI secure boot support Ard Biesheuvel
2019-01-17 11:14 ` [PATCH edk2-platforms 0/7] Silicon/SynQuacer: implement SMM based secure boot Leif Lindholm
2019-01-21 17:40 ` Ard Biesheuvel
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-list from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20190104144336.8941-1-ard.biesheuvel@linaro.org \
--to=devel@edk2.groups.io \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox