2019-06-04 10:11:33 +02:00
|
|
|
/* SPDX-License-Identifier: GPL-2.0-only */
|
2017-12-04 10:57:28 -06:00
|
|
|
/*
|
|
|
|
|
* AMD Platform Security Processor (PSP) interface driver
|
|
|
|
|
*
|
2019-12-04 11:48:58 +05:30
|
|
|
* Copyright (C) 2017-2019 Advanced Micro Devices, Inc.
|
2017-12-04 10:57:28 -06:00
|
|
|
*
|
|
|
|
|
* Author: Brijesh Singh <brijesh.singh@amd.com>
|
|
|
|
|
*/
|
|
|
|
|
|
2019-12-04 11:48:58 +05:30
|
|
|
#ifndef __SEV_DEV_H__
|
|
|
|
|
#define __SEV_DEV_H__
|
2017-12-04 10:57:28 -06:00
|
|
|
|
|
|
|
|
#include <linux/device.h>
|
|
|
|
|
#include <linux/spinlock.h>
|
|
|
|
|
#include <linux/mutex.h>
|
|
|
|
|
#include <linux/list.h>
|
|
|
|
|
#include <linux/wait.h>
|
|
|
|
|
#include <linux/dmapool.h>
|
|
|
|
|
#include <linux/hw_random.h>
|
|
|
|
|
#include <linux/bitops.h>
|
|
|
|
|
#include <linux/interrupt.h>
|
|
|
|
|
#include <linux/irqreturn.h>
|
|
|
|
|
#include <linux/dmaengine.h>
|
2017-12-04 10:57:28 -06:00
|
|
|
#include <linux/psp-sev.h>
|
|
|
|
|
#include <linux/miscdevice.h>
|
2019-11-12 13:58:34 -06:00
|
|
|
#include <linux/capability.h>
|
2017-12-04 10:57:28 -06:00
|
|
|
|
2023-03-10 15:19:46 -06:00
|
|
|
#define SEV_CMDRESP_CMD GENMASK(26, 16)
|
2019-12-04 11:48:59 +05:30
|
|
|
#define SEV_CMD_COMPLETE BIT(1)
|
|
|
|
|
#define SEV_CMDRESP_IOC BIT(0)
|
2017-12-04 10:57:28 -06:00
|
|
|
|
2017-12-04 10:57:28 -06:00
|
|
|
struct sev_misc_dev {
|
|
|
|
|
struct kref refcount;
|
|
|
|
|
struct miscdevice misc;
|
|
|
|
|
};
|
|
|
|
|
|
2019-12-04 11:48:59 +05:30
|
|
|
struct sev_device {
|
2017-12-04 10:57:28 -06:00
|
|
|
struct device *dev;
|
2019-12-04 11:48:59 +05:30
|
|
|
struct psp_device *psp;
|
2017-12-04 10:57:28 -06:00
|
|
|
|
|
|
|
|
void __iomem *io_regs;
|
2017-12-04 10:57:28 -06:00
|
|
|
|
2019-12-04 11:49:00 +05:30
|
|
|
struct sev_vdata *vdata;
|
|
|
|
|
|
2019-12-04 11:48:59 +05:30
|
|
|
int state;
|
|
|
|
|
unsigned int int_rcvd;
|
|
|
|
|
wait_queue_head_t int_queue;
|
|
|
|
|
struct sev_misc_dev *misc;
|
2018-05-25 15:23:29 -05:00
|
|
|
|
|
|
|
|
u8 api_major;
|
|
|
|
|
u8 api_minor;
|
|
|
|
|
u8 build;
|
2021-04-06 15:49:48 -07:00
|
|
|
|
|
|
|
|
void *cmd_buf;
|
2024-01-25 22:11:18 -06:00
|
|
|
void *cmd_buf_backup;
|
|
|
|
|
bool cmd_buf_active;
|
|
|
|
|
bool cmd_buf_backup_active;
|
crypto: ccp: Add support to initialize the AMD-SP for SEV-SNP
Before SNP VMs can be launched, the platform must be appropriately
configured and initialized via the SNP_INIT command.
During the execution of SNP_INIT command, the firmware configures
and enables SNP security policy enforcement in many system components.
Some system components write to regions of memory reserved by early
x86 firmware (e.g. UEFI). Other system components write to regions
provided by the operation system, hypervisor, or x86 firmware.
Such system components can only write to HV-fixed pages or Default
pages. They will error when attempting to write to pages in other page
states after SNP_INIT enables their SNP enforcement.
Starting in SNP firmware v1.52, the SNP_INIT_EX command takes a list of
system physical address ranges to convert into the HV-fixed page states
during the RMP initialization. If INIT_RMP is 1, hypervisors should
provide all system physical address ranges that the hypervisor will
never assign to a guest until the next RMP re-initialization.
For instance, the memory that UEFI reserves should be included in the
range list. This allows system components that occasionally write to
memory (e.g. logging to UEFI reserved regions) to not fail due to
RMP initialization and SNP enablement.
Note that SNP_INIT(_EX) must not be executed while non-SEV guests are
executing, otherwise it is possible that the system could reset or hang.
The psp_init_on_probe module parameter was added for SEV/SEV-ES support
and the init_ex_path module parameter to allow for time for the
necessary file system to be mounted/available.
SNP_INIT(_EX) does not use the file associated with init_ex_path. So, to
avoid running into issues where SNP_INIT(_EX) is called while there are
other running guests, issue it during module probe regardless of the
psp_init_on_probe setting, but maintain the previous deferrable handling
for SEV/SEV-ES initialization.
[ mdr: Squash in psp_init_on_probe changes from Tom, reduce
proliferation of 'probe' function parameter where possible.
bp: Fix 32-bit allmodconfig build. ]
Signed-off-by: Brijesh Singh <brijesh.singh@amd.com>
Co-developed-by: Ashish Kalra <ashish.kalra@amd.com>
Signed-off-by: Ashish Kalra <ashish.kalra@amd.com>
Co-developed-by: Jarkko Sakkinen <jarkko@profian.com>
Signed-off-by: Jarkko Sakkinen <jarkko@profian.com>
Signed-off-by: Tom Lendacky <thomas.lendacky@amd.com>
Signed-off-by: Michael Roth <michael.roth@amd.com>
Signed-off-by: Borislav Petkov (AMD) <bp@alien8.de>
Link: https://lore.kernel.org/r/20240126041126.1927228-14-michael.roth@amd.com
2024-01-25 22:11:13 -06:00
|
|
|
|
|
|
|
|
bool snp_initialized;
|
2017-12-04 10:57:28 -06:00
|
|
|
};
|
|
|
|
|
|
2019-12-04 11:48:59 +05:30
|
|
|
int sev_dev_init(struct psp_device *psp);
|
|
|
|
|
void sev_dev_destroy(struct psp_device *psp);
|
|
|
|
|
|
|
|
|
|
void sev_pci_init(void);
|
|
|
|
|
void sev_pci_exit(void);
|
|
|
|
|
|
2019-12-04 11:48:58 +05:30
|
|
|
#endif /* __SEV_DEV_H */
|