From: Andrew Jackson <ajack...@solarflare.com>

Add security level to image boot header.

Signed-off-by: Andrew Jackson <ajack...@solarflare.com>
Signed-off-by: Andrew Rybchenko <arybche...@solarflare.com>
---
 drivers/net/sfc/base/siena_flash.h | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/drivers/net/sfc/base/siena_flash.h 
b/drivers/net/sfc/base/siena_flash.h
index 91a9fe0..74bb949 100644
--- a/drivers/net/sfc/base/siena_flash.h
+++ b/drivers/net/sfc/base/siena_flash.h
@@ -103,7 +103,14 @@ typedef struct siena_mc_boot_hdr_s {               /* 
GENERATED BY scripts/genfwdef */
                                                /* the key, or 0xffff if 
unsigned. (Otherwise set to 0) */
        efx_byte_t      mumfw_subtype;          /* MUM & SUC images: subtype. 
(Otherwise set to 0) */
        efx_byte_t      reserved_b[3];          /* (set to 0) */
-       efx_dword_t     reserved_c[6];          /* (set to 0) */
+       efx_dword_t     security_level;         /* This number increases every 
time a serious security flaw */
+                                               /* is fixed. A secure NIC may 
not downgrade to any image */
+                                               /* with a lower security level 
than the current image. */
+                                               /* Note: The number in this 
header should only be used for */
+                                               /* determining the level of new 
images, not to determine */
+                                               /* the level of the current 
image as this header is not */
+                                               /* protected by a CMAC. */
+       efx_dword_t     reserved_c[5];          /* (set to 0) */
 } siena_mc_boot_hdr_t;
 
 #define        SIENA_MC_BOOT_HDR_PADDING \
-- 
2.7.4

Reply via email to