GNUBoot
/
coreboot-kgpe-d16
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

mb/facebook/fbg1701: Add config to additional list 

´config´ is removed from measure list (CB:74750)

Add 'config' to ram_stage_additional_list[] to have it measured and
verified.

BUG=NA
TEST=boot and verify coreboot logs on facebook FBG1701

Change-Id: Id4119bc3a01e11f14a091facf81964d1a71092c1
Signed-off-by: Frans Hendriks <fhendriks@eltan.com>
Reviewed-on: https://review.coreboot.org/c/coreboot/+/74752
Tested-by: build bot (Jenkins) <no-reply@coreboot.org>
Reviewed-by: Himanshu Sahdev <himanshu.sahdev@intel.com>
Reviewed-by: Martin L Roth <gaumless@gmail.com>
This commit is contained in:
Frans Hendriks 2023-04-25 11:43:29 +02:00 committed by Felix Held
parent 472d83bb0a
commit 0648267c1a
3 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/mainboard/facebook/fbg1701/board_verified_boot.c
View File

@ -60,6 +60,10 @@ const verify_item_t postcar_verify_list[] = {
* romstage verify list * romstage verify list
*/ */
static const verify_item_t ram_stage_additional_list[] = { static const verify_item_t ram_stage_additional_list[] = {
#if CONFIG(INCLUDE_CONFIG_FILE)
{ VERIFY_FILE, "config", { { NULL, CBFS_TYPE_RAW } },
HASH_IDX_CONFIG, MBOOT_PCR_INDEX_0 },
#endif
{ VERIFY_FILE, OP_ROM_VBT, { { NULL, CBFS_TYPE_RAW } }, { VERIFY_FILE, OP_ROM_VBT, { { NULL, CBFS_TYPE_RAW } },
HASH_IDX_OPROM, MBOOT_PCR_INDEX_2 }, HASH_IDX_OPROM, MBOOT_PCR_INDEX_2 },
#if CONFIG(BMP_LOGO) #if CONFIG(BMP_LOGO)

3
src/mainboard/facebook/fbg1701/manifest.h
View File

@ -18,5 +18,6 @@
#define HASH_IDX_DSDT 8 #define HASH_IDX_DSDT 8
#define HASH_IDX_POSTCAR_STAGE 9 #define HASH_IDX_POSTCAR_STAGE 9
#define HASH_IDX_PUBLICKEY 10 #define HASH_IDX_PUBLICKEY 10
#define HASH_IDX_BOOTBLOCK 11 /* Should always be the last one */ #define HASH_IDX_CONFIG 11
#define HASH_IDX_BOOTBLOCK 12 /* Should always be the last one */
#endif #endif

1
src/vendorcode/eltan/security/verified_boot/Kconfig
View File

@ -33,6 +33,7 @@ config VENDORCODE_ELTAN_VBOOT_MANIFEST
config VENDORCODE_ELTAN_OEM_MANIFEST_ITEMS config VENDORCODE_ELTAN_OEM_MANIFEST_ITEMS
int "Manifest Items" int "Manifest Items"
default 13 if INCLUDE_CONFIG_FILE
default 12 default 12
config VENDORCODE_ELTAN_OEM_MANIFEST_ITEM_SIZE config VENDORCODE_ELTAN_OEM_MANIFEST_ITEM_SIZE