mirror of
https://github.com/torvalds/linux.git
synced 2026-06-01 02:53:36 +02:00
tools/testing/cxl: Add "Unlock" security opcode support
Add support to emulate a CXL mem device support the "Unlock" operation. Reviewed-by: Jonathan Cameron <Jonathan.Cameron@huawei.com> Signed-off-by: Dave Jiang <dave.jiang@intel.com> Link: https://lore.kernel.org/r/166983614730.2734609.2280484207184754073.stgit@djiang5-desk3.ch.intel.com Signed-off-by: Dan Williams <dan.j.williams@intel.com>
This commit is contained in:
parent
2bb692f7a6
commit
8e80b18664
|
|
@ -331,6 +331,48 @@ static int mock_freeze_security(struct cxl_dev_state *cxlds, struct cxl_mbox_cmd
|
|||
return 0;
|
||||
}
|
||||
|
||||
static int mock_unlock_security(struct cxl_dev_state *cxlds, struct cxl_mbox_cmd *cmd)
|
||||
{
|
||||
struct cxl_mock_mem_pdata *mdata = dev_get_platdata(cxlds->dev);
|
||||
|
||||
if (cmd->size_in != NVDIMM_PASSPHRASE_LEN)
|
||||
return -EINVAL;
|
||||
|
||||
if (cmd->size_out != 0)
|
||||
return -EINVAL;
|
||||
|
||||
if (mdata->security_state & CXL_PMEM_SEC_STATE_FROZEN) {
|
||||
cmd->return_code = CXL_MBOX_CMD_RC_SECURITY;
|
||||
return -ENXIO;
|
||||
}
|
||||
|
||||
if (!(mdata->security_state & CXL_PMEM_SEC_STATE_USER_PASS_SET)) {
|
||||
cmd->return_code = CXL_MBOX_CMD_RC_SECURITY;
|
||||
return -ENXIO;
|
||||
}
|
||||
|
||||
if (mdata->security_state & CXL_PMEM_SEC_STATE_USER_PLIMIT) {
|
||||
cmd->return_code = CXL_MBOX_CMD_RC_SECURITY;
|
||||
return -ENXIO;
|
||||
}
|
||||
|
||||
if (!(mdata->security_state & CXL_PMEM_SEC_STATE_LOCKED)) {
|
||||
cmd->return_code = CXL_MBOX_CMD_RC_SECURITY;
|
||||
return -ENXIO;
|
||||
}
|
||||
|
||||
if (memcmp(cmd->payload_in, mdata->user_pass, NVDIMM_PASSPHRASE_LEN)) {
|
||||
if (++mdata->user_limit == PASS_TRY_LIMIT)
|
||||
mdata->security_state |= CXL_PMEM_SEC_STATE_USER_PLIMIT;
|
||||
cmd->return_code = CXL_MBOX_CMD_RC_PASSPHRASE;
|
||||
return -ENXIO;
|
||||
}
|
||||
|
||||
mdata->user_limit = 0;
|
||||
mdata->security_state &= ~CXL_PMEM_SEC_STATE_LOCKED;
|
||||
return 0;
|
||||
}
|
||||
|
||||
static int mock_get_lsa(struct cxl_dev_state *cxlds, struct cxl_mbox_cmd *cmd)
|
||||
{
|
||||
struct cxl_mbox_get_lsa *get_lsa = cmd->payload_in;
|
||||
|
|
@ -438,6 +480,9 @@ static int cxl_mock_mbox_send(struct cxl_dev_state *cxlds, struct cxl_mbox_cmd *
|
|||
case CXL_MBOX_OP_FREEZE_SECURITY:
|
||||
rc = mock_freeze_security(cxlds, cmd);
|
||||
break;
|
||||
case CXL_MBOX_OP_UNLOCK:
|
||||
rc = mock_unlock_security(cxlds, cmd);
|
||||
break;
|
||||
default:
|
||||
break;
|
||||
}
|
||||
|
|
|
|||
Loading…
Reference in New Issue
Block a user