diff options
| author | Aseda Aboagye <aaboagye@google.com> | 2017-02-13 10:57:26 -0800 |
|---|---|---|
| committer | chrome-bot <chrome-bot@chromium.org> | 2017-02-23 01:19:07 -0800 |
| commit | d7303404a59a296fad9085db23fa18fe97f0f5c3 (patch) | |
| tree | 5b20b0f8f182f60519509c68a46f2e63e27c2433 /include | |
| parent | 3ce5e5d8b3ebdd9abf9d182082a81e29bd899d2b (diff) | |
| download | chrome-ec-d7303404a59a296fad9085db23fa18fe97f0f5c3.tar.gz | |
cr50: Make sure TPM wipe only clears TPM data.
Previously, wiping the TPM would wipe all of NvMem, however, it really
should only clear the TPM's NvMem space. This commit adds a function to
clear a given NvMem user's space and makes the TPM only clear its space.
BUG=chrome-os-partner:61597
BRANCH=None
TEST=Add code for using nvmem vars, create a test variable, add a user
to snappy, unlock the console, verify that the user is no longer present
on the system and the test nvmem var still exists.
TEST=make -j buildall
Change-Id: Ic98baa5166a1ef9ae76e910b1b9ab100300e947f
Signed-off-by: Aseda Aboagye <aaboagye@google.com>
Reviewed-on: https://chromium-review.googlesource.com/445803
Commit-Ready: Aseda Aboagye <aaboagye@chromium.org>
Tested-by: Aseda Aboagye <aaboagye@chromium.org>
Reviewed-by: Vadim Bendebury <vbendeb@chromium.org>
Diffstat (limited to 'include')
| -rw-r--r-- | include/nvmem.h | 11 |
1 files changed, 5 insertions, 6 deletions
diff --git a/include/nvmem.h b/include/nvmem.h index 87de8b9cae..e9fae3d11d 100644 --- a/include/nvmem.h +++ b/include/nvmem.h @@ -174,14 +174,13 @@ int nvmem_move(uint32_t src_offset, uint32_t dest_offset, uint32_t size, int nvmem_commit(void); /* - * Reinitialzse all NvMem partitions + * Clear out a user's data across all partitions. * - * This function should be called when NvMem needs to be wiped out. - * - * @return EC_SUCCESS if flash operations are successful. - * EC_ERROR_UNKNOWN otherwise. + * @param user: The user who's data should be cleared. + * @return EC_SUCCESS if the user's data across all partitions was + * cleared. Error othrwise. */ -int nvmem_setup(void); +int nvmem_erase_user_data(enum nvmem_users user); /* * Temporarily stopping NVMEM commits could be beneficial. One use case is |