OvmfPkg/IntelTdx: Measure Td HobList and Configuration FV
RFC: https://bugzilla.tianocore.org/show_bug.cgi?id=3853 TdHobList and Configuration FV are external data provided by Host VMM. These are not trusted in Td guest. So they should be validated , measured and extended to Td RTMR registers. In the meantime 2 EFI_CC_EVENT_HOB are created. These 2 GUIDed HOBs carry the hash value of TdHobList and Configuration FV. In DXE phase EFI_CC_EVENT can be created based on these 2 GUIDed HOBs. Cc: Ard Biesheuvel <ardb+tianocore@kernel.org> Cc: Jiewen Yao <jiewen.yao@intel.com> Cc: Jordan Justen <jordan.l.justen@intel.com> Cc: Brijesh Singh <brijesh.singh@amd.com> Cc: Erdem Aktas <erdemaktas@google.com> Cc: James Bottomley <jejb@linux.ibm.com> Cc: Jiewen Yao <jiewen.yao@intel.com> Cc: Tom Lendacky <thomas.lendacky@amd.com> Cc: Gerd Hoffmann <kraxel@redhat.com> Reviewed-by: Jiewen Yao <jiewen.yao@intel.com> Signed-off-by: Min Xu <min.m.xu@intel.com>
This commit is contained in:
@@ -29,8 +29,7 @@
|
||||
PeilessStartup.c
|
||||
Hob.c
|
||||
DxeLoad.c
|
||||
|
||||
[Sources.X64]
|
||||
IntelTdx.c
|
||||
X64/VirtualMemory.c
|
||||
|
||||
[Packages]
|
||||
@@ -39,6 +38,8 @@
|
||||
UefiCpuPkg/UefiCpuPkg.dec
|
||||
OvmfPkg/OvmfPkg.dec
|
||||
EmbeddedPkg/EmbeddedPkg.dec
|
||||
CryptoPkg/CryptoPkg.dec
|
||||
SecurityPkg/SecurityPkg.dec
|
||||
|
||||
[LibraryClasses]
|
||||
BaseLib
|
||||
@@ -56,6 +57,8 @@
|
||||
PrePiLib
|
||||
QemuFwCfgLib
|
||||
PlatformInitLib
|
||||
HashLib
|
||||
SecMeasurementLib
|
||||
|
||||
[Guids]
|
||||
gEfiHobMemoryAllocModuleGuid
|
||||
@@ -63,6 +66,7 @@
|
||||
gUefiOvmfPkgPlatformInfoGuid
|
||||
gEfiMemoryTypeInformationGuid
|
||||
gPcdDataBaseHobGuid
|
||||
gCcEventEntryHobGuid
|
||||
|
||||
[Pcd]
|
||||
gUefiOvmfPkgTokenSpaceGuid.PcdCfvBase
|
||||
|
Reference in New Issue
Block a user