mirror of
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
synced 2024-08-28 20:02:17 +00:00
3bfeb61256
Extend the SED block driver so it can alternatively obtain a key from a sed-opal kernel keyring. The SED ioctls will indicate the source of the key, either directly in the ioctl data or from the keyring. This allows the use of SED commands in scripts such as udev scripts so that drives may be automatically unlocked as they become available. Signed-off-by: Greg Joyce <gjoyce@linux.vnet.ibm.com> Reviewed-by: Jonathan Derrick <jonathan.derrick@linux.dev> Acked-by: Jarkko Sakkinen <jarkko@kernel.org> Link: https://lore.kernel.org/r/20230721211534.3437070-4-gjoyce@linux.vnet.ibm.com Signed-off-by: Jens Axboe <axboe@kernel.dk>
80 lines
1.9 KiB
C
80 lines
1.9 KiB
C
/* SPDX-License-Identifier: GPL-2.0 */
|
|
/*
|
|
* Copyright © 2016 Intel Corporation
|
|
*
|
|
* Authors:
|
|
* Rafael Antognolli <rafael.antognolli@intel.com>
|
|
* Scott Bauer <scott.bauer@intel.com>
|
|
*/
|
|
|
|
#ifndef LINUX_OPAL_H
|
|
#define LINUX_OPAL_H
|
|
|
|
#include <uapi/linux/sed-opal.h>
|
|
#include <linux/compiler_types.h>
|
|
#include <linux/types.h>
|
|
|
|
struct opal_dev;
|
|
|
|
typedef int (sec_send_recv)(void *data, u16 spsp, u8 secp, void *buffer,
|
|
size_t len, bool send);
|
|
|
|
#ifdef CONFIG_BLK_SED_OPAL
|
|
void free_opal_dev(struct opal_dev *dev);
|
|
bool opal_unlock_from_suspend(struct opal_dev *dev);
|
|
struct opal_dev *init_opal_dev(void *data, sec_send_recv *send_recv);
|
|
int sed_ioctl(struct opal_dev *dev, unsigned int cmd, void __user *ioctl_ptr);
|
|
|
|
#define OPAL_AUTH_KEY "opal-boot-pin"
|
|
#define OPAL_AUTH_KEY_PREV "opal-boot-pin-prev"
|
|
|
|
static inline bool is_sed_ioctl(unsigned int cmd)
|
|
{
|
|
switch (cmd) {
|
|
case IOC_OPAL_SAVE:
|
|
case IOC_OPAL_LOCK_UNLOCK:
|
|
case IOC_OPAL_TAKE_OWNERSHIP:
|
|
case IOC_OPAL_ACTIVATE_LSP:
|
|
case IOC_OPAL_SET_PW:
|
|
case IOC_OPAL_ACTIVATE_USR:
|
|
case IOC_OPAL_REVERT_TPR:
|
|
case IOC_OPAL_LR_SETUP:
|
|
case IOC_OPAL_ADD_USR_TO_LR:
|
|
case IOC_OPAL_ENABLE_DISABLE_MBR:
|
|
case IOC_OPAL_ERASE_LR:
|
|
case IOC_OPAL_SECURE_ERASE_LR:
|
|
case IOC_OPAL_PSID_REVERT_TPR:
|
|
case IOC_OPAL_MBR_DONE:
|
|
case IOC_OPAL_WRITE_SHADOW_MBR:
|
|
case IOC_OPAL_GENERIC_TABLE_RW:
|
|
case IOC_OPAL_GET_STATUS:
|
|
case IOC_OPAL_GET_LR_STATUS:
|
|
case IOC_OPAL_GET_GEOMETRY:
|
|
case IOC_OPAL_DISCOVERY:
|
|
case IOC_OPAL_REVERT_LSP:
|
|
return true;
|
|
}
|
|
return false;
|
|
}
|
|
#else
|
|
static inline void free_opal_dev(struct opal_dev *dev)
|
|
{
|
|
}
|
|
|
|
static inline bool is_sed_ioctl(unsigned int cmd)
|
|
{
|
|
return false;
|
|
}
|
|
|
|
static inline int sed_ioctl(struct opal_dev *dev, unsigned int cmd,
|
|
void __user *ioctl_ptr)
|
|
{
|
|
return 0;
|
|
}
|
|
static inline bool opal_unlock_from_suspend(struct opal_dev *dev)
|
|
{
|
|
return false;
|
|
}
|
|
#define init_opal_dev(data, send_recv) NULL
|
|
#endif /* CONFIG_BLK_SED_OPAL */
|
|
#endif /* LINUX_OPAL_H */
|