[PATCH 2/3] rtc-efi: add timezone to rtc_time that will used by rtc-efi

2012-12-28 Thread Lee, Chun-Yi
: Matthew Garrett matthew.garr...@nebula.com Cc: Thomas Gleixner t...@linutronix.de Cc: Ingo Molnar mi...@redhat.com Cc: Jan Beulich jbeul...@suse.com Signed-off-by: Lee, Chun-Yi j...@suse.com --- drivers/rtc/rtc-efi.c| 20 +--- include/uapi/linux/rtc.h |1 + 2 files changed, 18

[PATCH 3/3] rtc-efi: set uie_unsupported for indicate rtc-efi doesn't support UIE mode

2012-12-28 Thread Lee, Chun-Yi
to emulate RTC_UIE on rtc-efi. Cc: Matt Fleming matt.flem...@intel.com Cc: H. Peter Anvin h...@zytor.com Cc: Matthew Garrett matthew.garr...@nebula.com Cc: Thomas Gleixner t...@linutronix.de Cc: Ingo Molnar mi...@redhat.com Cc: Jan Beulich jbeul...@suse.com Signed-off-by: Lee, Chun-Yi j...@suse.com

[PATCH] efivarfs: fix abnormal GUID in variable name by using strcpy to replace null with dash

2013-02-28 Thread Lee, Chun-Yi
. Tested on On HP z220. Cc: Matt Fleming m...@console-pimps.org Cc: Josh Boyer jwbo...@redhat.com Cc: Jeremy Kerr jeremy.k...@canonical.com Cc: Michael Schroeder m...@suse.com Reported-by: Frederic Crozat fcro...@suse.com Tested-by: Frederic Crozat fcro...@suse.com Signed-off-by: Lee, Chun-Yi j

[PATCH] x86, efi: initial the local variable of DataSize to zero

2013-05-02 Thread Lee, Chun-Yi
the size of data if we input a non-zero DataSize. Cc: Matthew Garrett m...@redhat.com Cc: Matt Fleming matt.flem...@intel.com Cc: H. Peter Anvin h...@zytor.com Signed-off-by: Lee, Chun-Yi j...@suse.com --- arch/x86/platform/efi/efi.c |2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff

[PATCH 00/18 v3] Signature verification of hibernate snapshot

2013-08-22 Thread Lee, Chun-Yi
that will switch on Secure Boot mode Lee, Chun-Yi (15): asymmetric keys: add interface and skeleton for implement signature generation asymmetric keys: implement EMSA_PKCS1-v1_5-ENCODE in rsa asymmetric keys: separate the length checking of octet string from RSA_I2OSP asymmetric keys

[PATCH 01/18] asymmetric keys: add interface and skeleton for implement signature generation

2013-08-22 Thread Lee, Chun-Yi
Add generate_signature interface on signature.c, asymmetric-subtype and rsa.c for prepare to implement signature generation. Reviewed-by: Jiri Kosina jkos...@suse.cz Signed-off-by: Lee, Chun-Yi j...@suse.com --- crypto/asymmetric_keys/private_key.h | 29 + crypto

[RFC PATCH 00/18 v3] Signature verification of hibernate snapshot

2013-08-22 Thread Lee, Chun-Yi
that will switch on Secure Boot mode Lee, Chun-Yi (15): asymmetric keys: add interface and skeleton for implement signature generation asymmetric keys: implement EMSA_PKCS1-v1_5-ENCODE in rsa asymmetric keys: separate the length checking of octet string from RSA_I2OSP asymmetric keys

[PATCH 01/18] asymmetric keys: add interface and skeleton for implement signature generation

2013-08-22 Thread Lee, Chun-Yi
Add generate_signature interface on signature.c, asymmetric-subtype and rsa.c for prepare to implement signature generation. Reviewed-by: Jiri Kosina jkos...@suse.cz Signed-off-by: Lee, Chun-Yi j...@suse.com --- crypto/asymmetric_keys/private_key.h | 29 + crypto

[PATCH 03/18] asymmetric keys: separate the length checking of octet string from RSA_I2OSP

2013-08-22 Thread Lee, Chun-Yi
-off-by: Lee, Chun-Yi j...@suse.com --- crypto/asymmetric_keys/rsa.c | 33 - 1 files changed, 24 insertions(+), 9 deletions(-) diff --git a/crypto/asymmetric_keys/rsa.c b/crypto/asymmetric_keys/rsa.c index 6996ff7..c26ae77 100644 --- a/crypto/asymmetric_keys/rsa.c

[PATCH 08/18] Secure boot: Add new capability

2013-08-22 Thread Lee, Chun-Yi
on that. We'll then strip it from the initial capability set if required. Signed-off-by: Matthew Garrett m...@redhat.com Acked-by: Lee, Chun-Yi j...@suse.com Signed-off-by: Lee, Chun-Yi j...@suse.com --- include/uapi/linux/capability.h |6 +- 1 files changed, 5 insertions(+), 1 deletions

[PATCH 17/18] Hibernate: introduced SNAPSHOT_SIG_HASH config for select hash algorithm

2013-08-22 Thread Lee, Chun-Yi
, Chun-Yi j...@suse.com --- kernel/power/Kconfig| 46 ++ kernel/power/snapshot.c | 27 ++- 2 files changed, 68 insertions(+), 5 deletions(-) diff --git a/kernel/power/Kconfig b/kernel/power/Kconfig index b592d88..79b34fa

[PATCH 18/18] Hibernate: notify bootloader regenerate key-pair for snapshot verification

2013-08-22 Thread Lee, Chun-Yi
. Userland hibernate tool can write GenS4Key at runtime, kernel will respect the value but not overwrite it when S4. This mechanism let userland tool can also notify bootloader to regenerate key-pair through GenS4Key flag. Cc: Matthew Garrett mj...@srcf.ucam.org Signed-off-by: Lee, Chun-Yi j

[PATCH 14/18] Hibernate: applied SNAPSHOT_VERIFICATION config to switch signature check

2013-08-22 Thread Lee, Chun-Yi
This patch applied SNAPSHOT_VERIFICATION kernel config for switching signature check of hibernate snapshot image. Reviewed-by: Jiri Kosina jkos...@suse.cz Signed-off-by: Lee, Chun-Yi j...@suse.com --- kernel/power/snapshot.c | 19 +++ kernel/power/swap.c | 30

[PATCH 15/18] Hibernate: adapt to UEFI secure boot with signature check

2013-08-22 Thread Lee, Chun-Yi
keys from bootloader. v2: Replace sign_key_data_loaded() by skey_data_available() to check sign key data is available for hibernate. Reviewed-by: Jiri Kosina jkos...@suse.cz Signed-off-by: Lee, Chun-Yi j...@suse.com --- kernel/power/hibernate.c | 36 +- kernel/power/main.c

[PATCH 16/18] Hibernate: show the verification time for monitor performance

2013-08-22 Thread Lee, Chun-Yi
Show the verification time for monitor the performance of SHA256 and RSA verification. Reviewed-by: Jiri Kosina jkos...@suse.cz Signed-off-by: Lee, Chun-Yi j...@suse.com --- kernel/power/snapshot.c |7 +++ 1 files changed, 7 insertions(+), 0 deletions(-) diff --git a/kernel/power

[PATCH 13/18] Hibernate: Avoid S4 sign key data included in snapshot image

2013-08-22 Thread Lee, Chun-Yi
This patch add swsusp_page_is_sign_key() method to hibernate_key.c and check the page is S4 sign key data when collect saveable page in snapshot.c to avoid sign key data included in snapshot image. Reviewed-by: Jiri Kosina jkos...@suse.cz Signed-off-by: Lee, Chun-Yi j...@suse.com --- kernel

[PATCH 12/18] Hibernate: generate and verify signature of snapshot

2013-08-22 Thread Lee, Chun-Yi
to resume target kernel but don't need write new private key to any other storage, e.g. swap. Cc: Matthew Garrett mj...@srcf.ucam.org Reviewed-by: Jiri Kosina jkos...@suse.cz Signed-off-by: Lee, Chun-Yi j...@suse.com --- kernel/power/power.h|6 + kernel/power/snapshot.c | 280

[PATCH 10/18] efi: Enable secure boot lockdown automatically when enabled in firmware

2013-08-22 Thread Lee, Chun-Yi
with efi_enabled. Signed-off-by: Matthew Garrett m...@redhat.com Signed-off-by: Josh Boyer jwbo...@redhat.com Acked-by: Lee, Chun-Yi j...@suse.com Signed-off-by: Lee, Chun-Yi j...@suse.com --- Documentation/x86/zero-page.txt|2 ++ arch/x86/boot/compressed/eboot.c | 32

[PATCH 11/18] Hibernate: introduced RSA key-pair to verify signature of snapshot

2013-08-22 Thread Lee, Chun-Yi
on EFI_STUB in Kconfig v2: Add CONFIG_SNAPSHOT_VERIFICATION for build of hibernate_keys.c depend on Kconfig. Cc: Matthew Garrett mj...@srcf.ucam.org Cc: Takashi Iwai ti...@suse.de Reviewed-by: Jiri Kosina jkos...@suse.cz Signed-off-by: Lee, Chun-Yi j...@suse.com --- arch/x86/boot/compressed/eboot.c

[PATCH 09/18] Secure boot: Add a dummy kernel parameter that will switch on Secure Boot mode

2013-08-22 Thread Lee, Chun-Yi
...@redhat.com Acked-by: Lee, Chun-Yi j...@suse.com Signed-off-by: Lee, Chun-Yi j...@suse.com --- Documentation/kernel-parameters.txt |7 +++ kernel/cred.c | 17 + 2 files changed, 24 insertions(+), 0 deletions(-) diff --git a/Documentation/kernel

[PATCH 07/18] asymmetric keys: explicitly add the leading zero byte to encoded message

2013-08-22 Thread Lee, Chun-Yi
and copy the remaining bytes from _EM. Reviewed-by: Jiri Kosina jkos...@suse.cz Signed-off-by: Lee, Chun-Yi j...@suse.com --- crypto/asymmetric_keys/rsa.c | 14 ++ 1 files changed, 10 insertions(+), 4 deletions(-) diff --git a/crypto/asymmetric_keys/rsa.c b/crypto/asymmetric_keys/rsa.c

[PATCH 06/18] asymmetric keys: support parsing PKCS #8 private key information

2013-08-22 Thread Lee, Chun-Yi
-off-by: Lee, Chun-Yi j...@suse.com --- crypto/asymmetric_keys/Kconfig | 11 ++ crypto/asymmetric_keys/Makefile| 16 +++ crypto/asymmetric_keys/pkcs8.asn1 | 19 crypto/asymmetric_keys/pkcs8_info_parser.c | 152 crypto

[PATCH 04/18] asymmetric keys: implement OS2IP in rsa

2013-08-22 Thread Lee, Chun-Yi
Implement Octet String to Integer conversion [RFC3447 sec 4.2] in rsa.c. It's the second step of signature generation operation. This patch is temporary set non-RSASP1 message to pks-S for debugging. Reviewed-by: Jiri Kosina jkos...@suse.cz Signed-off-by: Lee, Chun-Yi j...@suse.com --- crypto

[PATCH 05/18] asymmetric keys: implement RSASP1

2013-08-22 Thread Lee, Chun-Yi
Implement RSASP1 and fill-in the following data to public key signature structure: signature length (pkcs-k), signature octet strings (pks-S) and MPI of signature (pks-rsa.s). Reviewed-by: Jiri Kosina jkos...@suse.cz Signed-off-by: Lee, Chun-Yi j...@suse.com --- crypto/asymmetric_keys/rsa.c

[RFC V4 PATCH 00/15] Signature verification of hibernate snapshot

2013-09-14 Thread Lee, Chun-Yi
-ker...@opensuse.org for review: http://lists.opensuse.org/opensuse-kernel/2013-08/msg00025.html V1: - Internal review - github: https://github.com/joeyli/linux-s4sign/commits/devel-s4sign Lee, Chun-Yi (15): asymmetric keys: add interface and skeleton for implement signature generation

[PATCH V4 14/15] Hibernate: notify bootloader regenerate key-pair for snapshot verification

2013-09-14 Thread Lee, Chun-Yi
() in hibernate.c and user.c Cc: Matthew Garrett mj...@srcf.ucam.org Signed-off-by: Lee, Chun-Yi j...@suse.com --- kernel/power/Kconfig | 15 + kernel/power/hibernate.c |4 ++- kernel/power/hibernate_keys.c | 67 + kernel/power

[PATCH V4 12/15] Hibernate: show the verification time for monitor performance

2013-09-14 Thread Lee, Chun-Yi
Show the verification time for monitor the performance of SHA256 and RSA verification. Reviewed-by: Jiri Kosina jkos...@suse.cz Signed-off-by: Lee, Chun-Yi j...@suse.com --- kernel/power/snapshot.c |7 +++ 1 files changed, 7 insertions(+), 0 deletions(-) diff --git a/kernel/power

[PATCH V4 13/15] Hibernate: introduced SNAPSHOT_SIG_HASH config for select hash algorithm

2013-09-14 Thread Lee, Chun-Yi
, Chun-Yi j...@suse.com --- kernel/power/Kconfig| 46 ++ kernel/power/snapshot.c | 25 - 2 files changed, 66 insertions(+), 5 deletions(-) diff --git a/kernel/power/Kconfig b/kernel/power/Kconfig index b592d88..79b34fa

[PATCH V4 07/15] asymmetric keys: explicitly add the leading zero byte to encoded message

2013-09-14 Thread Lee, Chun-Yi
and copy the remaining bytes from _EM. V2: - Check the memory allocate result of EM to avoid use it when allocate fail. Cc: Pavel Machek pa...@ucw.cz Reviewed-by: Jiri Kosina jkos...@suse.cz Signed-off-by: Lee, Chun-Yi j...@suse.com --- crypto/asymmetric_keys/rsa.c | 20 +++- 1

[PATCH V4 02/15] asymmetric keys: implement EMSA_PKCS1-v1_5-ENCODE in rsa

2013-09-14 Thread Lee, Chun-Yi
/collateral/white-papers/h11300-pkcs-1v2-2-rsa-cryptography-standard-wp.pdf V2: - Clean up naming of variable: replace _EM by EM, replace EM by EM_tmp. - Add comment to EMSA_PKCS1-v1_5-ENCODE function. Cc: Pavel Machek pa...@ucw.cz Reviewed-by: Jiri Kosina jkos...@suse.cz Signed-off-by: Lee, Chun-Yi j

[PATCH V4 01/15] asymmetric keys: add interface and skeleton for implement signature generation

2013-09-14 Thread Lee, Chun-Yi
Add generate_signature interface on signature.c, asymmetric-subtype and rsa.c for prepare to implement signature generation. Reviewed-by: Jiri Kosina jkos...@suse.cz Signed-off-by: Lee, Chun-Yi j...@suse.com --- crypto/asymmetric_keys/private_key.h | 29 + crypto

[PATCH V4 09/15] Hibernate: generate and verify signature of snapshot

2013-09-14 Thread Lee, Chun-Yi
Machek pa...@ucw.cz Reviewed-by: Jiri Kosina jkos...@suse.cz Signed-off-by: Lee, Chun-Yi j...@suse.com --- kernel/power/power.h| 13 ++ kernel/power/snapshot.c | 288 ++- kernel/power/swap.c |4 + kernel/power/user.c |5 + 4 files

[PATCH V4 04/15] asymmetric keys: implement OS2IP in rsa

2013-09-14 Thread Lee, Chun-Yi
Kosina jkos...@suse.cz Signed-off-by: Lee, Chun-Yi j...@suse.com --- crypto/asymmetric_keys/rsa.c | 29 - 1 files changed, 24 insertions(+), 5 deletions(-) diff --git a/crypto/asymmetric_keys/rsa.c b/crypto/asymmetric_keys/rsa.c index aac8b77..a092aac 100644 --- a/crypto

[PATCH V4 05/15] asymmetric keys: implement RSASP1

2013-09-14 Thread Lee, Chun-Yi
-off-by: Lee, Chun-Yi j...@suse.com --- crypto/asymmetric_keys/rsa.c | 47 +++-- 1 files changed, 44 insertions(+), 3 deletions(-) diff --git a/crypto/asymmetric_keys/rsa.c b/crypto/asymmetric_keys/rsa.c index a092aac..0ede317 100644 --- a/crypto/asymmetric_keys

[PATCH V4 11/15] Hibernate: taint kernel when signature check fail

2013-09-14 Thread Lee, Chun-Yi
it through snapshot_sig_enforce parameter or EFI_SECURE_BOOT_SNAPSHOT_SIG_ENFORCE. Signed-off-by: Lee, Chun-Yi j...@suse.com --- Documentation/kernel-parameters.txt |7 +++ arch/x86/Kconfig| 11 +++ include/linux/kernel.h |1 + include/linux

[PATCH 10/15] Hibernate: Avoid S4 sign key data included in snapshot image

2013-09-14 Thread Lee, Chun-Yi
This patch add swsusp_page_is_sign_key() method to hibernate_key.c and check the page is S4 sign key data when collect saveable page in snapshot.c to avoid sign key data included in snapshot image. Reviewed-by: Jiri Kosina jkos...@suse.cz Signed-off-by: Lee, Chun-Yi j...@suse.com --- kernel

[PATCH V4 03/15] asymmetric keys: separate the length checking of octet string from RSA_I2OSP

2013-09-14 Thread Lee, Chun-Yi
: Pavel Machek pa...@ucw.cz Reviewed-by: Jiri Kosina jkos...@suse.cz Signed-off-by: Lee, Chun-Yi j...@suse.com --- crypto/asymmetric_keys/rsa.c | 33 - 1 files changed, 24 insertions(+), 9 deletions(-) diff --git a/crypto/asymmetric_keys/rsa.c b/crypto

[RFC PATCH 00/14] Support timezone of ACPI TAD and EFI TIME

2013-12-18 Thread Lee, Chun-Yi
the mechanism for adjust system time and block CMOS interface. About the definition of timezone and the format transformation between ACPI, EFI and tm_gmtoff of GNU. Please check the rtc-tz.txt document in patch. Jan Beulich (1): x86-64/efi: Use EFI to deal with platform wall clock (again) Lee, Chun

[PATCH 01/14] rtc-efi: fix decrease day twice when computing year days

2013-12-18 Thread Lee, Chun-Yi
Compared with the logic in rtc_year_days of efirtc.c, the code in rtc-efi decreases value of day twice when it computing year days. That's becase rtc_year_days in rtc-lib.c already decrease day for return the year days from 0 to 365. --- drivers/rtc/rtc-efi.c |2 +- 1 files changed, 1

[PATCH 03/14] rtc: block registration of rtc-cmos when CMOS RTC Not Present

2013-12-18 Thread Lee, Chun-Yi
-by: Lee, Chun-Yi j...@suse.com --- arch/x86/kernel/rtc.c | 20 drivers/rtc/rtc-cmos.c |9 + 2 files changed, 25 insertions(+), 4 deletions(-) diff --git a/arch/x86/kernel/rtc.c b/arch/x86/kernel/rtc.c index ca9622a..9b6c568 100644 --- a/arch/x86/kernel/rtc.c

[RFC PATCH 00/14] Support timezone of ACPI TAD and EFI TIME

2013-12-18 Thread Lee, Chun-Yi
the mechanism for adjust system time and block CMOS interface. About the definition of timezone and the format transformation between ACPI, EFI and tm_gmtoff of GNU. Please check the rtc-tz.txt document in patch. Jan Beulich (1): x86-64/efi: Use EFI to deal with platform wall clock (again) Lee, Chun

[PATCH 03/14] rtc: block registration of rtc-cmos when CMOS RTC Not Present

2013-12-18 Thread Lee, Chun-Yi
-by: Lee, Chun-Yi j...@suse.com --- arch/x86/kernel/rtc.c | 20 drivers/rtc/rtc-cmos.c |9 + 2 files changed, 25 insertions(+), 4 deletions(-) diff --git a/arch/x86/kernel/rtc.c b/arch/x86/kernel/rtc.c index ca9622a..9b6c568 100644 --- a/arch/x86/kernel/rtc.c

[PATCH 01/14] rtc-efi: fix decrease day twice when computing year days

2013-12-18 Thread Lee, Chun-Yi
Compared with the logic in rtc_year_days of efirtc.c, the code in rtc-efi decreases value of day twice when it computing year days. That's becase rtc_year_days in rtc-lib.c already decrease day for return the year days from 0 to 365. --- drivers/rtc/rtc-efi.c |2 +- 1 files changed, 1

[TEST PATCH 14/14] acpi: add early parameter to set CMOS RTC Not Present bit for testing

2013-12-18 Thread Lee, Chun-Yi
This is a patch for testing that will not go to any git tree. Add a early kernel parameter to set CMOS RTC Not Present bit in acpi_gbl_FADT variable for testing. Use acpi_no_cmos_rtc=1 to enable this bit to block rtc cmos interface. Signed-off-by: Lee, Chun-Yi j...@suse.com --- arch/x86/kernel

[RFC PATCH 10/14] rtc: improve and move week day computing function to rtc header

2013-12-18 Thread Lee, Chun-Yi
Due to rtc-acpid and efi time used the same logic for computing week day, so this patch moves code to rtc.h header file. Additionally using a leap year algorithm to replace the for-loop block in compute_wday for improve the performance. The first version of algorithm is from Oliver Neukum. ---

[RFC PATCH 08/14] rtc-efi: set uie_unsupported for indicate rtc-efi doesn't support UIE mode

2013-12-18 Thread Lee, Chun-Yi
to emulate RTC_UIE on rtc-efi. Signed-off-by: Lee, Chun-Yi j...@suse.com --- drivers/rtc/rtc-efi.c |2 ++ 1 files changed, 2 insertions(+), 0 deletions(-) diff --git a/drivers/rtc/rtc-efi.c b/drivers/rtc/rtc-efi.c index e0e3c7e..693ea47 100644 --- a/drivers/rtc/rtc-efi.c +++ b/drivers/rtc/rtc

[RFC PATCH 11/14] rtc: switch to get/set rtc time to efi functions if CMOS RTC Not Present git set.

2013-12-18 Thread Lee, Chun-Yi
When CMOS RTC Not Present git set in FADT, system should not access CMOS interface for time. This patch move get/set rtc time function from CMOS to EFI runtime on x86_64 machine. And, it also set the BUG_ON check in rtc_cmos_read/write function to avoid access it. Signed-off-by: Lee, Chun-Yi j

[RFC PATCH 09/14] efi: move functions of access efi time to header file for sharing

2013-12-18 Thread Lee, Chun-Yi
There have some functions, e.g. compute_yday, compute_wday, convert efi time... are duplicated in efirtc, rtc-efi and will also used in rtc.c. So this patch moved those functions of access efi time to efi.h header file for sharing. Signed-off-by: Lee, Chun-Yi j...@suse.com --- drivers/char

[RFC PATCH 13/14] Documentation/RTC: add document of ACPI TAD and EFI TIME driver

2013-12-18 Thread Lee, Chun-Yi
This patch add rtc-tz.txt document to explain the RTC driver of ACPI TAD, EFI TIME. It focus on the timezone field and CMOS RTC Not Present bit of ACPI 5.0. Signed-off-by: Lee, Chun-Yi j...@suse.com --- Documentation/rtc-tz.txt | 510 ++ 1 files

[RFC PATCH 12/14] efi: adjust system time base on timezone from EFI time services

2013-12-18 Thread Lee, Chun-Yi
follow EFI spec to interpret the RTC time as a local time if timezone value is EFI_UNSPECIFIED_TIMEZONE, that's because Linux stored UTC to BIOS on shipped UEFI machines. Signed-off-by: Lee, Chun-Yi j...@suse.com --- arch/x86/platform/efi/efi.c | 37 + include

[RFC PATCH 05/14] rtc: Add RTC driver of ACPI Time and Alarm Device

2013-12-18 Thread Lee, Chun-Yi
This patch add the RTC driver of ACPI TAD to provide userspace access ACPI time through RTC interface. Signed-off-by: Lee, Chun-Yi j...@suse.com --- drivers/rtc/Kconfig | 10 ++ drivers/rtc/Makefile |1 + drivers/rtc/rtc-acpitad.c | 294

[RFC PATCH 07/14] rtc-efi: add GMTOFF support to rtc_efi

2013-12-18 Thread Lee, Chun-Yi
EFI_UNSPECIFIED_TIMEZONE value on IA64. Signed-off-by: Lee, Chun-Yi j...@suse.com --- drivers/rtc/rtc-efi.c | 100 - 1 files changed, 99 insertions(+), 1 deletions(-) diff --git a/drivers/rtc/rtc-efi.c b/drivers/rtc/rtc-efi.c index c4c3843..e0e3c7e

[RFC PATCH 04/14] ACPI: Add ACPI 5.0 Time and Alarm Device driver

2013-12-18 Thread Lee, Chun-Yi
This patch add the driver of Time and Alarm Device in ACPI 5.0. Currently it only implemented get/set time functions and grab the capabilities of device when driver initial. This driver also register rtc-acpitad platform device for RTC ACPITAD stub driver using. Signed-off-by: Lee, Chun-Yi j

[RFC PATCH 06/14] rtc-efi: register rtc-efi device when EFI enabled

2013-12-18 Thread Lee, Chun-Yi
. Cc: Matt Fleming matt.flem...@intel.com Cc: H. Peter Anvin h...@zytor.com Cc: Matthew Garrett matthew.garr...@nebula.com Cc: Thomas Gleixner t...@linutronix.de Cc: Ingo Molnar mi...@redhat.com Cc: Jan Beulich jbeul...@suse.com Signed-off-by: Lee, Chun-Yi j...@suse.com --- arch/x86/platform/efi

[PATCH] ACPI / init: Run acpi_early_init() before timekeeping_init()

2014-01-14 Thread Lee, Chun-Yi
Signed-off-by: Lee, Chun-Yi j...@suse.com --- init/main.c |2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/init/main.c b/init/main.c index febc511..b6d93c8 100644 --- a/init/main.c +++ b/init/main.c @@ -565,6 +565,7 @@ asmlinkage void __init start_kernel(void

[PATCH] x86/efi: autoload efivars

2014-07-07 Thread Lee, Chun-Yi
, and register a corresponding platform device whenever EFI runtime services are available. This should trigger udev to load them. Cc: Ben Hutchings b...@decadent.org.uk Cc: Matt Fleming matt.flem...@intel.com Signed-off-by: Lee, Chun-Yi j...@suse.com --- arch/x86/platform/efi/efi.c| 15

[PATCH v2] x86/efi: autoload efivars

2014-07-09 Thread Lee, Chun-Yi
...@intel.com Signed-off-by: Lee, Chun-Yi j...@suse.com --- drivers/firmware/efi/efi.c | 15 +++ drivers/firmware/efi/efivars.c | 1 + 2 files changed, 16 insertions(+) diff --git a/drivers/firmware/efi/efi.c b/drivers/firmware/efi/efi.c index eff1a2f..6fee86b 100644 --- a/drivers

[PATCH] x86_64/efi: Mapping Boot and Runtime EFI memory regions to different starting virtual address

2015-07-29 Thread Lee, Chun-Yi
m...@codeblueprint.co.uk Cc: Borislav Petkov b...@alien8.de Signed-off-by: Lee, Chun-Yi j...@suse.com --- arch/x86/platform/efi/efi_64.c | 32 1 file changed, 20 insertions(+), 12 deletions(-) diff --git a/arch/x86/platform/efi/efi_64.c b/arch/x86/platform/efi

[PATCH v2 15/16] PM / hibernate: Bypass verification logic on legacy BIOS

2015-08-11 Thread Lee, Chun-Yi
-off-by: Lee, Chun-Yi j...@suse.com --- drivers/firmware/efi/efi-hibernate_keys.c | 3 +++ kernel/power/Kconfig | 3 ++- kernel/power/snapshot.c | 8 ++-- kernel/power/user.c | 6 +- 4 files changed, 16 insertions(+), 4 deletions

[PATCH v2 16/16] PM / hibernate: Document signature verification of hibernate snapshot

2015-08-11 Thread Lee, Chun-Yi
Reviewed-by: Jiri Kosina jkos...@suse.com Tested-by: Jiri Kosina jkos...@suse.com Signed-off-by: Lee, Chun-Yi j...@suse.com --- Documentation/power/swsusp-signature-verify.txt | 86 + 1 file changed, 86 insertions(+) create mode 100644 Documentation/power/swsusp-signature

[PATCH v2 04/16] x86/efi: Generating random number in EFI stub

2015-08-11 Thread Lee, Chun-Yi
protocol. The separate codes can avoid impacting aslr function. Reviewed-by: Jiri Kosina jkos...@suse.com Tested-by: Jiri Kosina jkos...@suse.com Signed-off-by: Lee, Chun-Yi j...@suse.com --- arch/x86/boot/compressed/Makefile | 1 + arch/x86/boot/compressed/efi_random.c | 80

[PATCH v2 05/16] x86/efi: Get entropy through EFI random number generator protocol

2015-08-11 Thread Lee, Chun-Yi
To grab random numbers through EFI protocol as one of the entropies source of swsusp key, this patch adds the logic for accessing EFI RNG (random number generator) protocol that's introduced since UEFI 2.4. Signed-off-by: Lee, Chun-Yi j...@suse.com --- arch/x86/boot/compressed/efi_random.c | 209

[PATCH v2 02/16] x86/efi: Add get and set variable to EFI services pointer table

2015-08-11 Thread Lee, Chun-Yi
...@suse.com Tested-by: Jiri Kosina jkos...@suse.com Signed-off-by: Lee, Chun-Yi j...@suse.com --- arch/x86/boot/compressed/eboot.c | 4 arch/x86/boot/compressed/head_32.S | 6 +++--- arch/x86/boot/compressed/head_64.S | 8 arch/x86/include/asm/efi.h | 2 ++ 4 files changed, 13

[PATCH v2 00/16] Signature verification of hibernate snapshot

2015-08-11 Thread Lee, Chun-Yi
declaration. - Moved set_hibernation_key_regen_flag to user.c Lee, Chun-Yi (16): PM / hibernate: define HMAC algorithm and digest size of hibernation x86/efi: Add get and set variable to EFI services pointer table x86/boot: Public getting random boot function x86/efi: Generating random number

[PATCH v2 00/16] Signature verification of hibernate snapshot

2015-08-11 Thread Lee, Chun-Yi
declaration. - Moved set_hibernation_key_regen_flag to user.c Lee, Chun-Yi (16): PM / hibernate: define HMAC algorithm and digest size of hibernation x86/efi: Add get and set variable to EFI services pointer table x86/boot: Public getting random boot function x86/efi: Generating random number

[PATCH v2 01/16] PM / hibernate: define HMAC algorithm and digest size of hibernation

2015-08-11 Thread Lee, Chun-Yi
code uses it. Add HIBERNATE_VERIFICATION kernel config for using by later hibernate signature verification code. Signed-off-by: Lee, Chun-Yi j...@suse.com --- include/linux/suspend.h | 5 + kernel/power/Kconfig| 13 + kernel/power/power.h| 3 ++- 3 files changed, 20

[PATCH v2 02/16] x86/efi: Add get and set variable to EFI services pointer table

2015-08-11 Thread Lee, Chun-Yi
...@suse.com Tested-by: Jiri Kosina jkos...@suse.com Signed-off-by: Lee, Chun-Yi j...@suse.com --- arch/x86/boot/compressed/eboot.c | 4 arch/x86/boot/compressed/head_32.S | 6 +++--- arch/x86/boot/compressed/head_64.S | 8 arch/x86/include/asm/efi.h | 2 ++ 4 files changed, 13

[PATCH v2 07/16] efi: Make efi_status_to_err() public

2015-08-11 Thread Lee, Chun-Yi
Moved the function of transferring EFI status to kernel error for later used by EFI stub. Reviewed-by: Jiri Kosina jkos...@suse.com Tested-by: Jiri Kosina jkos...@suse.com Signed-off-by: Lee, Chun-Yi j...@suse.com --- drivers/firmware/efi/vars.c | 33 - include

[PATCH v2 14/16] PM / hibernate: Allow user trigger hibernation key re-generating

2015-08-11 Thread Lee, Chun-Yi
Kosina jkos...@suse.com Tested-by: Jiri Kosina jkos...@suse.com Signed-off-by: Lee, Chun-Yi j...@suse.com --- arch/x86/boot/compressed/eboot.c | 19 --- arch/x86/power/hibernate_keys.c | 2 ++ drivers/firmware/Makefile | 1 + drivers/firmware/efi/Kconfig

[PATCH v2 06/16] x86/efi: Generating random HMAC key for siging hibernate image

2015-08-11 Thread Lee, Chun-Yi
-b8a3-878a5dc9ef21. Reviewed-by: Jiri Kosina jkos...@suse.com Tested-by: Jiri Kosina jkos...@suse.com Signed-off-by: Lee, Chun-Yi j...@suse.com --- arch/x86/boot/compressed/eboot.c | 60 arch/x86/include/asm/suspend.h | 9 ++ include/linux/suspend.h

[PATCH v2 08/16] x86/efi: Carrying hibernation key by setup data

2015-08-11 Thread Lee, Chun-Yi
For forwarding hibernation key from EFI stub to boot kernel, this patch allocates setup data for carrying hibernation key, size and the status of efi operating. Reviewed-by: Jiri Kosina jkos...@suse.com Tested-by: Jiri Kosina jkos...@suse.com Signed-off-by: Lee, Chun-Yi j...@suse.com --- arch

[PATCH v2 11/16] PM / hibernate: Avoid including hibernation key to hibernate image

2015-08-11 Thread Lee, Chun-Yi
Kosina jkos...@suse.com Tested-by: Jiri Kosina jkos...@suse.com Signed-off-by: Lee, Chun-Yi j...@suse.com --- arch/x86/power/hibernate_keys.c | 15 +++ kernel/power/power.h| 3 +++ kernel/power/snapshot.c | 6 ++ 3 files changed, 24 insertions(+) diff --git a/arch

[PATCH v2 13/16] PM / hibernate: Add configuration to enforce signature verification

2015-08-11 Thread Lee, Chun-Yi
that is unsigned or has a signature for which we don't have the key. When the enforce flag is enabled, then the hibernate restoring process will be failed and boot as normal. Reviewed-by: Jiri Kosina jkos...@suse.com Tested-by: Jiri Kosina jkos...@suse.com Signed-off-by: Lee, Chun-Yi j...@suse.com

[RFC PATCH 14/16] PM / hibernate: Allow user trigger swsusp key re-generating

2015-07-16 Thread Lee, Chun-Yi
key when queried flag. To aviod the swsusp key changes in hibernating cycle that causes hiberne restoring failed, this flag is only available when system runs normal reboot or shutdown. The hibernate code will clean the flag when it raised in a hiberante cycle. Signed-off-by: Lee, Chun-Yi j

[RFC PATCH 12/16] PM / hibernate: Forward signature verifying result and key to image kernel

2015-07-16 Thread Lee, Chun-Yi
codes will asking key handler to fill forward informations to buffer page. Then restoring swsusp key data to key page, and cleaning this page buffer for next cycle. Signed-off-by: Lee, Chun-Yi j...@suse.com --- arch/x86/power/hibernate_keys.c | 63 + kernel

[RFC PATCH 16/16] PM / hibernate: Document signature verification of hibernate snapshot

2015-07-16 Thread Lee, Chun-Yi
Signed-off-by: Lee, Chun-Yi j...@suse.com --- Documentation/power/swsusp-signature-verify.txt | 86 + 1 file changed, 86 insertions(+) create mode 100644 Documentation/power/swsusp-signature-verify.txt diff --git a/Documentation/power/swsusp-signature-verify.txt b

[RFC PATCH 09/16] PM / hibernate: Reserve swsusp key and earse footprints

2015-07-16 Thread Lee, Chun-Yi
by memblock. Signed-off-by: Lee, Chun-Yi j...@suse.com --- arch/x86/include/asm/suspend.h | 4 +++ arch/x86/kernel/setup.c | 21 ++- arch/x86/power/Makefile | 1 + arch/x86/power/hibernate_keys.c | 79 + kernel/power/power.h

[RFC PATCH 11/16] PM / hibernate: Avoid including swsusp key to hibernate image

2015-07-16 Thread Lee, Chun-Yi
The HMAC key should only resides in kernel memory space but not leak to outside. To avoid including swsusp key in hibernate snapshot image, this patch adds the checking block in the code for asking saveable pages to make sure the key page should not marked as saveable. Signed-off-by: Lee, Chun-Yi

[RFC PATCH 03/16] x86/boot: Public getting random boot function

2015-07-16 Thread Lee, Chun-Yi
This patch moves the getting random boot function from aslr to misc for later used by EFI stub to generate the first entropy of hmac key for signing hibernate snapshot image. Signed-off-by: Lee, Chun-Yi j...@suse.com --- arch/x86/boot/compressed/aslr.c | 55

[RFC PATCH 02/16] x86/efi: Add get and set variable to EFI services pointer table

2015-07-16 Thread Lee, Chun-Yi
Add get variable and set variable function to EFI services pointer table for supporting later functions of hibernate signature verification to keep the HMAC key in efi boot service veriable. Signed-off-by: Lee, Chun-Yi j...@suse.com --- arch/x86/boot/compressed/eboot.c | 4 arch/x86/boot

[RFC PATCH 00/16] Signature verification of hibernate snapshot

2015-07-16 Thread Lee, Chun-Yi
option or sigenforce kernel parameter to force hibernate recovery process stop when verification failed. It allows user to trigger the key re-generating process in EFI stub through SNAPSHOT_REGENERATE_KEY ioctl. Lee, Chun-Yi (16): PM / hibernate: define HMAC algorithm and digest size of swsusp

[RFC PATCH 07/16] efi: Public the function of transferring EFI status to kernel error

2015-07-16 Thread Lee, Chun-Yi
Moved the function of transferring EFI status to kernel error for later used by EFI stub. Signed-off-by: Lee, Chun-Yi j...@suse.com --- drivers/firmware/efi/vars.c | 33 - include/linux/efi.h | 33 + 2 files changed, 33

[RFC PATCH 04/16] x86/efi: Generating random number in EFI stub

2015-07-16 Thread Lee, Chun-Yi
protocol. The separate codes can avoid impacting aslr function. Signed-off-by: Lee, Chun-Yi j...@suse.com --- arch/x86/boot/compressed/Makefile | 1 + arch/x86/boot/compressed/efi_random.c | 88 +++ arch/x86/boot/compressed/misc.c | 4 +- arch/x86/boot

[RFC PATCH 05/16] x86/efi: Get entropy through EFI random number generator protocol

2015-07-16 Thread Lee, Chun-Yi
To grab random numbers through EFI protocol as one of the entropies source of swsusp key, this patch adds the logic for accessing EFI RNG (random number generator) protocol that's introduced since UEFI 2.4. Signed-off-by: Lee, Chun-Yi j...@suse.com --- arch/x86/boot/compressed/efi_random.c | 193

[PATCH 3/4] MODSIGN: load blacklist from MOKx

2017-11-29 Thread Lee, Chun-Yi
This patch adds the logic to load the blacklisted hash and certificates from MOKx which is maintained by shim bootloader. Cc: David Howells <dhowe...@redhat.com> Cc: Josh Boyer <jwbo...@fedoraproject.org> Signed-off-by: "Lee, Chun-Yi" <j...@suse.com>

[PATCH 4/4] MODSIGN: checking the blacklisted hash before loading a kernel module

2017-11-29 Thread Lee, Chun-Yi
or not, the hash can be compared by kernel. Cc: David Howells <dhowe...@redhat.com> Cc: Josh Boyer <jwbo...@fedoraproject.org> Signed-off-by: "Lee, Chun-Yi" <j...@suse.com> --- kernel/module_signing.c | 62 +++-- 1 file changed, 60 inserti

[PATCH 0/4] Using the hash in MOKx to blacklist kernel module

2017-11-29 Thread Lee, Chun-Yi
not be loaded when secure boot is disabled. And, modified error message prints out appropriate status string for reading by human being. Lee, Chun-Yi (4): MODSIGN: do not load mok when secure boot disabled MODSIGN: print appropriate status message when getting UEFI certificates list

[PATCH 2/4] MODSIGN: print appropriate status message when getting UEFI certificates list

2017-11-29 Thread Lee, Chun-Yi
MokListRT: EFI_NOT_FOUND [0.788537] MODSIGN: Couldn't get UEFI MokListXRT: EFI_NOT_FOUND Cc: David Howells <dhowe...@redhat.com> Cc: Josh Boyer <jwbo...@fedoraproject.org> Signed-off-by: "Lee, Chun-Yi" <j...@suse.com> -

[PATCH 0/4] Using the hash in MOKx to blacklist kernel module

2017-11-29 Thread Lee, Chun-Yi
. Or revoking a kernel module that it was signed by a unsecure key. Except MOKx, this patch set fixs another two issues: The MOK/MOKx should not be loaded when secure boot is disabled. And, modified error message prints out appropriate status string for reading by human being. Lee, Chun-Yi (4

[PATCH 1/4] MODSIGN: do not load mok when secure boot disabled

2017-11-29 Thread Lee, Chun-Yi
owe...@redhat.com> Cc: Josh Boyer <jwbo...@fedoraproject.org> Signed-off-by: "Lee, Chun-Yi" <j...@suse.com> --- certs/load_uefi.c | 26 +++--- 1 file changed, 15 insertions(+), 11 deletions(-) diff --git a/certs/load_uefi.c b/certs/load_uefi.c index 3d88459

[PATCH] efi: Fix the size not consistent issue when unmapping memory map

2018-05-02 Thread Lee, Chun-Yi
lt;ard.biesheu...@linaro.org> Cc: Takashi Iwai <ti...@suse.de> Cc: Vivek Goyal <vgo...@redhat.com> Cc: Ingo Molnar <mi...@redhat.com> Tested-by: Randy Wright <rwri...@hpe.com> Signed-off-by: "Lee, Chun-Yi" <j...@suse.com> --- drivers/firmware/efi/memmap.c

[PATCH] efi: setting secure boot flag in EFI stub when the sentinel is tainted.

2017-10-28 Thread Lee, Chun-Yi
flag can be kept when the secure mode is not _unset_. Therefore the flag value from EFI stub can also be kept. Reference: https://bugzilla.redhat.com/show_bug.cgi?id=1418360 Signed-off-by: "Lee, Chun-Yi" <j...@suse.com> Cc: Matt Fleming <m...@codeblueprint.co.uk> Cc

[PATCH 5/5] MODSIGN: check the attributes of db and mok

2018-03-13 Thread Lee, Chun-Yi
we trust it. Cc: David Howells <dhowe...@redhat.com> Cc: Josh Boyer <jwbo...@fedoraproject.org> Cc: James Bottomley <james.bottom...@hansenpartnership.com> Signed-off-by: "Lee, Chun-Yi" <j...@suse.com> --- certs/load_uefi.c | 35 +++-

[PATCH 3/5] MODSIGN: load blacklist from MOKx

2018-03-13 Thread Lee, Chun-Yi
This patch adds the logic to load the blacklisted hash and certificates from MOKx which is maintained by shim bootloader. Cc: David Howells <dhowe...@redhat.com> Cc: Josh Boyer <jwbo...@fedoraproject.org> Cc: James Bottomley <james.bottom...@hansenpartnership.com> Signed-off-by:

[PATCH 2/5] MODSIGN: print appropriate status message when getting UEFI certificates list

2018-03-13 Thread Lee, Chun-Yi
MokListRT: EFI_NOT_FOUND [0.788537] MODSIGN: Couldn't get UEFI MokListXRT: EFI_NOT_FOUND Cc: David Howells <dhowe...@redhat.com> Cc: Josh Boyer <jwbo...@fedoraproject.org> Cc: James Bottomley <james.bottom...@hansenpartnership.com> Signed-off-by: "Lee, Chun-Yi"

[PATCH 4/5] MODSIGN: checking the blacklisted hash before loading a kernel module

2018-03-13 Thread Lee, Chun-Yi
or not, the hash can be compared by kernel. Cc: David Howells <dhowe...@redhat.com> Cc: Josh Boyer <jwbo...@fedoraproject.org> Cc: James Bottomley <james.bottom...@hansenpartnership.com> Signed-off-by: "Lee, Chun-Yi" <j...@suse.com>

[PATCH 1/5] MODSIGN: do not load mok when secure boot disabled

2018-03-13 Thread Lee, Chun-Yi
owe...@redhat.com> Cc: Josh Boyer <jwbo...@fedoraproject.org> Cc: James Bottomley <james.bottom...@hansenpartnership.com> Signed-off-by: "Lee, Chun-Yi" <j...@suse.com> --- certs/load_uefi.c | 26 +++--- 1 file changed, 15 insertions(+), 11 deletions(-)

[PATCH 2/5] MODSIGN: print appropriate status message when getting UEFI certificates list

2018-03-13 Thread Lee, Chun-Yi
MokListRT: EFI_NOT_FOUND [0.788537] MODSIGN: Couldn't get UEFI MokListXRT: EFI_NOT_FOUND Cc: David Howells <dhowe...@redhat.com> Cc: Josh Boyer <jwbo...@fedoraproject.org> Cc: James Bottomley <james.bottom...@hansenpartnership.com> Signed-off-by: Lee, Chun-Yi <j...

[PATCH 0/5 v2] Using the hash in MOKx to blacklist kernel module

2018-03-13 Thread Lee, Chun-Yi
message prints out appropriate status string for reading by human being. v2: Chekcikng the attributes of db and mok before loading certificates. Lee, Chun-Yi (5): MODSIGN: do not load mok when secure boot disabled MODSIGN: print appropriate status message when getting UEFI certificates list

[PATCH 0/5 v2] Using the hash in MOKx to blacklist kernel module

2018-03-13 Thread Lee, Chun-Yi
message prints out appropriate status string for reading by human being. v2: Chekcikng the attributes of db and mok before loading certificates. Lee, Chun-Yi (5): MODSIGN: do not load mok when secure boot disabled MODSIGN: print appropriate status message when getting UEFI certificates list

  1   2   >