efi: call get_event_log before ExitBootServices
authorThiebaud Weksteen <tweek@google.com>
Wed, 20 Sep 2017 08:13:39 +0000 (10:13 +0200)
committerJarkko Sakkinen <jarkko.sakkinen@linux.intel.com>
Mon, 8 Jan 2018 10:58:35 +0000 (12:58 +0200)
commit33b6d03469b2206fb51ecc37f40411a857ad8fff
tree6b0c5cc3fc87cdc3e5f796b55094563fb9c1bf69
parent4d01d29d9307d321149ff5ad66d47bee8e56c012
efi: call get_event_log before ExitBootServices

With TPM 2.0 specification, the event logs may only be accessible by
calling an EFI Boot Service. Modify the EFI stub to copy the log area to
a new Linux-specific EFI configuration table so it remains accessible
once booted.

When calling this service, it is possible to specify the expected format
of the logs: TPM 1.2 (SHA1) or TPM 2.0 ("Crypto Agile"). For now, only the
first format is retrieved.

Signed-off-by: Thiebaud Weksteen <tweek@google.com>
Reviewed-by: Javier Martinez Canillas <javierm@redhat.com>
Tested-by: Javier Martinez Canillas <javierm@redhat.com>
Tested-by: Jarkko Sakkinen <jarkko.sakkinen@linux.intel.com>
Reviewed-by: Jarkko Sakkinen <jarkko.sakkinen@linux.intel.com>
Signed-off-by: Jarkko Sakkinen <jarkko.sakkinen@linux.intel.com>
arch/x86/boot/compressed/eboot.c
drivers/firmware/efi/Makefile
drivers/firmware/efi/efi.c
drivers/firmware/efi/libstub/Makefile
drivers/firmware/efi/libstub/tpm.c
drivers/firmware/efi/tpm.c [new file with mode: 0644]
include/linux/efi.h