mirror of
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
synced 2024-10-01 06:33:07 +00:00
50c4decc1b
The PSP sets several pre-defined bits in the capabilities register to indicate that security attributes of the platform. Export these attributes into userspace for administrators to confirm platform is properly locked down. Acked-by: Tom Lendacky <thomas.lendacky@amd.com> Signed-off-by: Mario Limonciello <mario.limonciello@amd.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
87 lines
2.4 KiB
Text
87 lines
2.4 KiB
Text
What: /sys/bus/pci/devices/<BDF>/fused_part
|
|
Date: June 2022
|
|
KernelVersion: 5.19
|
|
Contact: mario.limonciello@amd.com
|
|
Description:
|
|
The /sys/bus/pci/devices/<BDF>/fused_part file reports
|
|
whether the CPU or APU has been fused to prevent tampering.
|
|
0: Not fused
|
|
1: Fused
|
|
|
|
What: /sys/bus/pci/devices/<BDF>/debug_lock_on
|
|
Date: June 2022
|
|
KernelVersion: 5.19
|
|
Contact: mario.limonciello@amd.com
|
|
Description:
|
|
The /sys/bus/pci/devices/<BDF>/debug_lock_on reports
|
|
whether the AMD CPU or APU has been unlocked for debugging.
|
|
Possible values:
|
|
0: Not locked
|
|
1: Locked
|
|
|
|
What: /sys/bus/pci/devices/<BDF>/tsme_status
|
|
Date: June 2022
|
|
KernelVersion: 5.19
|
|
Contact: mario.limonciello@amd.com
|
|
Description:
|
|
The /sys/bus/pci/devices/<BDF>/tsme_status file reports
|
|
the status of transparent secure memory encryption on AMD systems.
|
|
Possible values:
|
|
0: Not active
|
|
1: Active
|
|
|
|
What: /sys/bus/pci/devices/<BDF>/anti_rollback_status
|
|
Date: June 2022
|
|
KernelVersion: 5.19
|
|
Contact: mario.limonciello@amd.com
|
|
Description:
|
|
The /sys/bus/pci/devices/<BDF>/anti_rollback_status file reports
|
|
whether the PSP is enforcing rollback protection.
|
|
Possible values:
|
|
0: Not enforcing
|
|
1: Enforcing
|
|
|
|
What: /sys/bus/pci/devices/<BDF>/rpmc_production_enabled
|
|
Date: June 2022
|
|
KernelVersion: 5.19
|
|
Contact: mario.limonciello@amd.com
|
|
Description:
|
|
The /sys/bus/pci/devices/<BDF>/rpmc_production_enabled file reports
|
|
whether Replay Protected Monotonic Counter support has been enabled.
|
|
Possible values:
|
|
0: Not enabled
|
|
1: Enabled
|
|
|
|
What: /sys/bus/pci/devices/<BDF>/rpmc_spirom_available
|
|
Date: June 2022
|
|
KernelVersion: 5.19
|
|
Contact: mario.limonciello@amd.com
|
|
Description:
|
|
The /sys/bus/pci/devices/<BDF>/rpmc_spirom_available file reports
|
|
whether an Replay Protected Monotonic Counter supported SPI is installed
|
|
on the system.
|
|
Possible values:
|
|
0: Not present
|
|
1: Present
|
|
|
|
What: /sys/bus/pci/devices/<BDF>/hsp_tpm_available
|
|
Date: June 2022
|
|
KernelVersion: 5.19
|
|
Contact: mario.limonciello@amd.com
|
|
Description:
|
|
The /sys/bus/pci/devices/<BDF>/hsp_tpm_available file reports
|
|
whether the HSP TPM has been activated.
|
|
Possible values:
|
|
0: Not activated or present
|
|
1: Activated
|
|
|
|
What: /sys/bus/pci/devices/<BDF>/rom_armor_enforced
|
|
Date: June 2022
|
|
KernelVersion: 5.19
|
|
Contact: mario.limonciello@amd.com
|
|
Description:
|
|
The /sys/bus/pci/devices/<BDF>/rom_armor_enforced file reports
|
|
whether RomArmor SPI protection is enforced.
|
|
Possible values:
|
|
0: Not enforced
|
|
1: Enforced
|