6b5bc77c9b
Stefan thinks they don't add value. Command used: sed -i -e '/file is part of /d' $(git grep "file is part of " |egrep ":( */\*.*\*/\$|#|;#|-- | *\* )" | cut -d: -f1 |grep -v crossgcc |grep -v gcov | grep -v /elf.h |grep -v nvramtool) The exceptions are for: - crossgcc (patch file) - gcov (imported from gcc) - elf.h (imported from GNU's libc) - nvramtool (more complicated header) The removed lines are: - fmt.Fprintln(f, "/* This file is part of the coreboot project. */") -# This file is part of a set of unofficial pre-commit hooks available -/* This file is part of coreboot */ -# This file is part of msrtool. -/* This file is part of msrtool. */ - * This file is part of ncurses, designed to be appended after curses.h.in -/* This file is part of pgtblgen. */ - * This file is part of the coreboot project. - /* This file is part of the coreboot project. */ -# This file is part of the coreboot project. -# This file is part of the coreboot project. -## This file is part of the coreboot project. --- This file is part of the coreboot project. -/* This file is part of the coreboot project */ -/* This file is part of the coreboot project. */ -;## This file is part of the coreboot project. -# This file is part of the coreboot project. It originated in the - * This file is part of the coreinfo project. -## This file is part of the coreinfo project. - * This file is part of the depthcharge project. -/* This file is part of the depthcharge project. */ -/* This file is part of the ectool project. */ - * This file is part of the GNU C Library. - * This file is part of the libpayload project. -## This file is part of the libpayload project. -/* This file is part of the Linux kernel. */ -## This file is part of the superiotool project. -/* This file is part of the superiotool project */ -/* This file is part of uio_usbdebug */ Change-Id: I82d872b3b337388c93d5f5bf704e9ee9e53ab3a9 Signed-off-by: Patrick Georgi <pgeorgi@google.com> Reviewed-on: https://review.coreboot.org/c/coreboot/+/41194 Reviewed-by: HAOUAS Elyes <ehaouas@noos.fr> Tested-by: build bot (Jenkins) <no-reply@coreboot.org>
72 lines
2.1 KiB
C
72 lines
2.1 KiB
C
/* SPDX-License-Identifier: GPL-2.0-only */
|
|
|
|
#ifndef _BOOT_DEVICE_H_
|
|
#define _BOOT_DEVICE_H_
|
|
|
|
#include <commonlib/region.h>
|
|
|
|
/*
|
|
* Boot device region can be protected by 2 sources, media and controller.
|
|
* The following modes are identified. It depends on the flash chip and the
|
|
* controller if mode is actually supported.
|
|
*
|
|
* MEDIA_WP : Flash/Boot device enforces write protect
|
|
* CTRLR_WP : Controller device enforces write protect
|
|
* CTRLR_RP : Controller device enforces read protect
|
|
* CTRLR_RWP : Controller device enforces read-write protect
|
|
*/
|
|
enum bootdev_prot_type {
|
|
CTRLR_WP = 1,
|
|
CTRLR_RP = 2,
|
|
CTRLR_RWP = 3,
|
|
MEDIA_WP = 4,
|
|
};
|
|
/*
|
|
* Please note that the read-only boot device may not be coherent with
|
|
* the read-write boot device. Thus, mixing mmap() and writeat() is
|
|
* most likely not to work so don't rely on such semantics.
|
|
*/
|
|
|
|
/* Return the region_device for the read-only boot device. */
|
|
const struct region_device *boot_device_ro(void);
|
|
|
|
/* Return the region_device for the read-write boot device. */
|
|
const struct region_device *boot_device_rw(void);
|
|
|
|
/*
|
|
* Create a sub-region of the read-only boot device.
|
|
* Returns 0 on success, < 0 on error.
|
|
*/
|
|
int boot_device_ro_subregion(const struct region *sub,
|
|
struct region_device *subrd);
|
|
|
|
/*
|
|
* Create a sub-region of the read-write boot device.
|
|
* Returns 0 on success, < 0 on error.
|
|
*/
|
|
int boot_device_rw_subregion(const struct region *sub,
|
|
struct region_device *subrd);
|
|
|
|
/*
|
|
* Write protect a sub-region of the boot device represented
|
|
* by the region device.
|
|
* Returns 0 on success, < 0 on error.
|
|
*/
|
|
int boot_device_wp_region(const struct region_device *rd,
|
|
const enum bootdev_prot_type type);
|
|
|
|
/*
|
|
* Initialize the boot device. This may be called multiple times within
|
|
* a stage so boot device implementations should account for this behavior.
|
|
**/
|
|
void boot_device_init(void);
|
|
|
|
/*
|
|
* Restrict read/write access to the bootmedia using platform defined rules.
|
|
*/
|
|
#if CONFIG(BOOTMEDIA_LOCK_NONE) || (CONFIG(BOOTMEDIA_LOCK_IN_VERSTAGE) && ENV_RAMSTAGE)
|
|
static inline void boot_device_security_lockdown(void) {}
|
|
#else
|
|
void boot_device_security_lockdown(void);
|
|
#endif
|
|
#endif /* _BOOT_DEVICE_H_ */
|