76a2bcb997
As a preparation to test tpm2_key_protector with grub-emu, the new option, --tpm-device, is introduced to specify the TPM device for grub-emu so that grub-emu can access an emulated TPM device from the host. Since grub-emu can directly access the device on host, it's easy to implement the essential TCG2 command submission function with the read/write functions and enable tpm2_key_protector module for grub-emu, so that we can further test TPM2 key unsealing with grub-emu. Signed-off-by: Gary Lin <glin@suse.com> Reviewed-by: Stefan Berger <stefanb@linux.ibm.com> Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com> Tested-by: Stefan Berger <stefanb@linux.ibm.com>
50 lines
1.4 KiB
C
50 lines
1.4 KiB
C
/*
|
|
* GRUB -- GRand Unified Bootloader
|
|
* Copyright (C) 2024 SUSE LLC
|
|
* Copyright (C) 2024 Free Software Foundation, Inc.
|
|
*
|
|
* GRUB is free software: you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation, either version 3 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* GRUB is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with GRUB. If not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
#include <grub/mm.h>
|
|
#include <grub/emu/misc.h>
|
|
|
|
#include <tss2_buffer.h>
|
|
#include <tss2_structs.h>
|
|
#include <tcg2.h>
|
|
|
|
grub_err_t
|
|
grub_tcg2_get_max_output_size (grub_size_t *size)
|
|
{
|
|
if (size == NULL)
|
|
return GRUB_ERR_BAD_ARGUMENT;
|
|
|
|
*size = GRUB_TPM2_BUFFER_CAPACITY;
|
|
|
|
return GRUB_ERR_NONE;
|
|
}
|
|
|
|
grub_err_t
|
|
grub_tcg2_submit_command (grub_size_t input_size, grub_uint8_t *input,
|
|
grub_size_t output_size, grub_uint8_t *output)
|
|
{
|
|
if (grub_util_tpm_write (input, input_size) != input_size)
|
|
return GRUB_ERR_BAD_DEVICE;
|
|
|
|
if (grub_util_tpm_read (output, output_size) < sizeof (TPM_RESPONSE_HEADER_t))
|
|
return GRUB_ERR_BAD_DEVICE;
|
|
|
|
return GRUB_ERR_NONE;
|
|
}
|