diff options
Diffstat (limited to 'drm/nouveau/include/nvkm')
| -rw-r--r-- | drm/nouveau/include/nvkm/core/device.h | 10 | ||||
| -rw-r--r-- | drm/nouveau/include/nvkm/core/secure_boot.h | 52 |
2 files changed, 62 insertions, 0 deletions
diff --git a/drm/nouveau/include/nvkm/core/device.h b/drm/nouveau/include/nvkm/core/device.h index 8f760002e..19e75bb0f 100644 --- a/drm/nouveau/include/nvkm/core/device.h +++ b/drm/nouveau/include/nvkm/core/device.h @@ -78,6 +78,9 @@ struct nvkm_device { u64 disable_mask; u32 debug; + /* secure boot state, to repeat the process when needed */ + void *secure_boot_state; + const struct nvkm_device_chip *chip; enum { NV_04 = 0x04, @@ -205,6 +208,13 @@ struct nvkm_device_chip { int (*sw )(struct nvkm_device *, int idx, struct nvkm_sw **); int (*vic )(struct nvkm_device *, int idx, struct nvkm_engine **); int (*vp )(struct nvkm_device *, int idx, struct nvkm_engine **); + + struct { + /* Bit-mask of IDs of managed falcons. 0 means no secure boot */ + unsigned long managed_falcons; + /* ID of the falcon that will perform secure boot */ + unsigned long boot_falcon; + } secure_boot; }; struct nvkm_device *nvkm_device_find(u64 name); diff --git a/drm/nouveau/include/nvkm/core/secure_boot.h b/drm/nouveau/include/nvkm/core/secure_boot.h new file mode 100644 index 000000000..ddec92bb8 --- /dev/null +++ b/drm/nouveau/include/nvkm/core/secure_boot.h @@ -0,0 +1,52 @@ +/* + * Copyright (c) 2015, NVIDIA CORPORATION. All rights reserved. + * + * Permission is hereby granted, free of charge, to any person obtaining a + * copy of this software and associated documentation files (the "Software"), + * to deal in the Software without restriction, including without limitation + * the rights to use, copy, modify, merge, publish, distribute, sublicense, + * and/or sell copies of the Software, and to permit persons to whom the + * Software is furnished to do so, subject to the following conditions: + * + * The above copyright notice and this permission notice shall be included in + * all copies or substantial portions of the Software. + * + * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR + * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, + * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL + * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER + * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING + * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER + * DEALINGS IN THE SOFTWARE. + */ + +#ifndef __NVKM_SECURE_BOOT_H__ +#define __NVKM_SECURE_BOOT_H__ + +#include <core/device.h> + +#define LSF_FALCON_ID_PMU 0 +#define LSF_FALCON_ID_RESERVED 1 +#define LSF_FALCON_ID_FECS 2 +#define LSF_FALCON_ID_GPCCS 3 +#define LSF_FALCON_ID_END 4 +#define LSF_FALCON_ID_INVALID 0xffffffff + +int nvkm_secure_boot_init(struct nvkm_device *); +void nvkm_secure_boot_fini(struct nvkm_device *); + +int nvkm_secure_boot(struct nvkm_device *); + +static inline bool +nvkm_is_secure(struct nvkm_device *device, unsigned long falcon_id) +{ + return device->chip->secure_boot.managed_falcons & BIT(falcon_id); +} + +static inline bool +nvkm_need_secure_boot(struct nvkm_device *device) +{ + return device->chip->secure_boot.managed_falcons != 0; +} + +#endif |