From: Ard Biesheuvel <ard.biesheuvel@linaro.org>
To: Leif Lindholm <leif.lindholm@linaro.org>
Cc: "edk2-devel@lists.01.org" <edk2-devel@lists.01.org>,
Masahisa Kojima <masahisa.kojima@linaro.org>
Subject: Re: [PATCH edk2-platforms 0/7] Silicon/SynQuacer: implement SMM based secure boot
Date: Mon, 21 Jan 2019 18:40:31 +0100 [thread overview]
Message-ID: <CAKv+Gu_+Mmutk_o6ODzpeYq52hfeAC2iQAEv6Vma85sXU5WpNQ@mail.gmail.com> (raw)
In-Reply-To: <20190117111422.yuwqcz6ogoah462k@bivouac.eciton.net>
On Thu, 17 Jan 2019 at 12:14, Leif Lindholm <leif.lindholm@linaro.org> wrote:
>
> On Fri, Jan 04, 2019 at 03:43:29PM +0100, Ard Biesheuvel wrote:
> > Wire up the various pieces so that the authenticated variable store
> > runs entirely in standalone MM context residing in a secure partition.
> >
> > This primarily involves refactoring the platform's NOR flash driver so
> > we can build a version that can work in the standalone MM context.
> > Beyond that, it is just a matter of enabling all the boilerplate in
> > the .DSC and .FDF files.
> >
> > Note that the resulting standalone MM firmware volume needs to be
> > wrapped in a FIP, which is not part of the build sequence.
> >
> > Cc: Leif Lindholm <leif.lindholm@linaro.org>
> > Cc: Masahisa Kojima <masahisa.kojima@linaro.org>
> >
> > Ard Biesheuvel (7):
> > Silicon/SynQuacer/Fip006Dxe: drop block I/O and disk I/O routines
> > Silicon/SynQuacer/Fip006Dxe: factor out DXE specific pieces
> > Silicon/SynQuacer/Fip006Dxe: implement standalone MM variant
> > Silicon/SynQuacer/Fip006Dxe: use proper accessor for unaligned access
> > Platform/DeveloperBox: create shared .DSC include file
> > Platform/DeveloperBox: add .DSC/.FDF description of MM components
> > Platform/DeveloperBox: add MM based UEFI secure boot support
>
> For the patches I haven't commented on individually:
> Reviewed-by: Leif Lindholm <leif.lindholm@linaro.org>
>
Thanks
Series pushed as 9b725b6ebb39..d571b43f8741
> > .../Socionext/DeveloperBox/DeveloperBox.dsc | 304 +---
> > .../DeveloperBox/DeveloperBox.dsc.inc | 315 ++++
> > .../Socionext/DeveloperBox/DeveloperBox.fdf | 13 +
> > .../Socionext/DeveloperBox/DeveloperBoxMm.dsc | 103 ++
> > .../Socionext/DeveloperBox/DeveloperBoxMm.fdf | 161 ++
> > .../SynQuacer/Drivers/Fip006Dxe/Fip006Dxe.inf | 9 +-
> > .../Drivers/Fip006Dxe/Fip006StandaloneMm.inf | 71 +
> > .../SynQuacer/Drivers/Fip006Dxe/NorFlash.c | 1006 +++++++++++++
> > .../Fip006Dxe/{NorFlashDxe.h => NorFlash.h} | 93 +-
> > .../Drivers/Fip006Dxe/NorFlashBlockIoDxe.c | 138 --
> > .../SynQuacer/Drivers/Fip006Dxe/NorFlashDxe.c | 1341 ++---------------
> > .../{NorFlashFvbDxe.c => NorFlashFvb.c} | 197 +--
> > .../SynQuacer/Drivers/Fip006Dxe/NorFlashSmm.c | 182 +++
> > 13 files changed, 2076 insertions(+), 1857 deletions(-)
> > create mode 100644 Platform/Socionext/DeveloperBox/DeveloperBox.dsc.inc
> > create mode 100644 Platform/Socionext/DeveloperBox/DeveloperBoxMm.dsc
> > create mode 100644 Platform/Socionext/DeveloperBox/DeveloperBoxMm.fdf
> > create mode 100644 Silicon/Socionext/SynQuacer/Drivers/Fip006Dxe/Fip006StandaloneMm.inf
> > create mode 100644 Silicon/Socionext/SynQuacer/Drivers/Fip006Dxe/NorFlash.c
> > rename Silicon/Socionext/SynQuacer/Drivers/Fip006Dxe/{NorFlashDxe.h => NorFlash.h} (85%)
> > delete mode 100644 Silicon/Socionext/SynQuacer/Drivers/Fip006Dxe/NorFlashBlockIoDxe.c
> > rename Silicon/Socionext/SynQuacer/Drivers/Fip006Dxe/{NorFlashFvbDxe.c => NorFlashFvb.c} (76%)
> > create mode 100644 Silicon/Socionext/SynQuacer/Drivers/Fip006Dxe/NorFlashSmm.c
> >
> > --
> > 2.17.1
> >
prev parent reply other threads:[~2019-01-21 17:40 UTC|newest]
Thread overview: 24+ messages / expand[flat|nested] mbox.gz Atom feed top
2019-01-04 14:43 [PATCH edk2-platforms 0/7] Silicon/SynQuacer: implement SMM based secure boot Ard Biesheuvel
2019-01-04 14:43 ` [PATCH edk2-platforms 1/7] Silicon/SynQuacer/Fip006Dxe: drop block I/O and disk I/O routines Ard Biesheuvel
2019-01-17 9:50 ` Leif Lindholm
2019-01-17 10:59 ` Ard Biesheuvel
2019-01-04 14:43 ` [PATCH edk2-platforms 2/7] Silicon/SynQuacer/Fip006Dxe: factor out DXE specific pieces Ard Biesheuvel
2019-01-17 10:10 ` Leif Lindholm
2019-01-17 11:27 ` Ard Biesheuvel
2019-01-21 16:16 ` Ard Biesheuvel
2019-01-21 16:46 ` Leif Lindholm
2019-01-21 16:47 ` Ard Biesheuvel
2019-01-21 16:53 ` Leif Lindholm
2019-01-04 14:43 ` [PATCH edk2-platforms 3/7] Silicon/SynQuacer/Fip006Dxe: implement standalone MM variant Ard Biesheuvel
2019-01-04 14:43 ` [PATCH edk2-platforms 4/7] Silicon/SynQuacer/Fip006Dxe: use proper accessor for unaligned access Ard Biesheuvel
2019-01-04 14:43 ` [PATCH edk2-platforms 5/7] Platform/DeveloperBox: create shared .DSC include file Ard Biesheuvel
2019-01-04 14:43 ` [PATCH edk2-platforms 6/7] Platform/DeveloperBox: add .DSC/.FDF description of MM components Ard Biesheuvel
2019-01-17 11:04 ` Leif Lindholm
2019-01-17 11:10 ` Ard Biesheuvel
2019-01-17 12:08 ` Leif Lindholm
2019-01-17 12:18 ` Ard Biesheuvel
2019-01-21 16:57 ` Ard Biesheuvel
2019-01-21 17:03 ` Leif Lindholm
2019-01-04 14:43 ` [PATCH edk2-platforms 7/7] Platform/DeveloperBox: add MM based UEFI secure boot support Ard Biesheuvel
2019-01-17 11:14 ` [PATCH edk2-platforms 0/7] Silicon/SynQuacer: implement SMM based secure boot Leif Lindholm
2019-01-21 17:40 ` Ard Biesheuvel [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-list from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=CAKv+Gu_+Mmutk_o6ODzpeYq52hfeAC2iQAEv6Vma85sXU5WpNQ@mail.gmail.com \
--to=devel@edk2.groups.io \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox