6f785cfcc3
If TPM error happens, set TPM flag to NOT present, so that trusted boot patch is disabled. Also report status code for failure, so that platform may register handler to apply policy like force system reset, or disable TPM permanently. Contributed-under: TianoCore Contribution Agreement 1.0 Signed-off-by: "Yao, Jiewen" <jiewen.yao@intel.com> Reviewed-by: "Dong, Guo" <guo.dong@intel.com> git-svn-id: https://svn.code.sf.net/p/edk2/code/trunk/edk2@16598 6f19259b-4bc3-4df7-8a09-765794883524
107 lines
4.2 KiB
INI
107 lines
4.2 KiB
INI
## @file
|
|
# Produces TrEE protocol and measure boot environment
|
|
# This module will produce TrEE protocol and measure boot environment.
|
|
#
|
|
# Caution: This module requires additional review when modified.
|
|
# This driver will have external input - PE/COFF image.
|
|
# This external input must be validated carefully to avoid security issue like
|
|
# buffer overflow, integer overflow.
|
|
#
|
|
# Copyright (c) 2013 - 2015, Intel Corporation. All rights reserved.<BR>
|
|
# This program and the accompanying materials
|
|
# are licensed and made available under the terms and conditions of the BSD License
|
|
# which accompanies this distribution. The full text of the license may be found at
|
|
# http://opensource.org/licenses/bsd-license.php
|
|
# THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.
|
|
#
|
|
##
|
|
|
|
[Defines]
|
|
INF_VERSION = 0x00010005
|
|
BASE_NAME = TrEEDxe
|
|
MODULE_UNI_FILE = TrEEDxe.uni
|
|
FILE_GUID = 2A7946E3-1AB2-49a9-ACCB-C6275139C1A5
|
|
MODULE_TYPE = DXE_DRIVER
|
|
VERSION_STRING = 1.0
|
|
ENTRY_POINT = DriverEntry
|
|
|
|
#
|
|
# The following information is for reference only and not required by the build tools.
|
|
#
|
|
# VALID_ARCHITECTURES = IA32 X64 IPF
|
|
#
|
|
|
|
[Sources]
|
|
TrEEDxe.c
|
|
MeasureBootPeCoff.c
|
|
|
|
[Packages]
|
|
MdePkg/MdePkg.dec
|
|
MdeModulePkg/MdeModulePkg.dec
|
|
SecurityPkg/SecurityPkg.dec
|
|
CryptoPkg/CryptoPkg.dec
|
|
|
|
[LibraryClasses]
|
|
MemoryAllocationLib
|
|
BaseLib
|
|
UefiBootServicesTableLib
|
|
HobLib
|
|
UefiDriverEntryPoint
|
|
UefiRuntimeServicesTableLib
|
|
BaseMemoryLib
|
|
DebugLib
|
|
Tpm2CommandLib
|
|
PrintLib
|
|
UefiLib
|
|
Tpm2DeviceLib
|
|
HashLib
|
|
PerformanceLib
|
|
ReportStatusCodeLib
|
|
|
|
[Guids]
|
|
## SOMETIMES_CONSUMES ## SystemTable # Smbios Table
|
|
## SOMETIMES_CONSUMES ## GUID # Handoff Table for measurement.
|
|
gEfiSmbiosTableGuid
|
|
|
|
## SOMETIMES_CONSUMES ## Variable:L"SecureBoot"
|
|
## SOMETIMES_CONSUMES ## Variable:L"PK"
|
|
## SOMETIMES_CONSUMES ## Variable:L"KEK"
|
|
## SOMETIMES_CONSUMES ## Variable:L"BootXXXX"
|
|
gEfiGlobalVariableGuid
|
|
|
|
## SOMETIMES_CONSUMES ## Variable:L"db"
|
|
## SOMETIMES_CONSUMES ## Variable:L"dbx"
|
|
gEfiImageSecurityDatabaseGuid
|
|
|
|
gTcgEventEntryHobGuid ## SOMETIMES_CONSUMES ## HOB
|
|
gTpmErrorHobGuid ## SOMETIMES_CONSUMES ## HOB
|
|
gEfiEventExitBootServicesGuid ## CONSUMES ## Event
|
|
gEventExitBootServicesFailedGuid ## SOMETIMES_CONSUMES ## Event
|
|
gEfiTpmDeviceInstanceNoneGuid ## SOMETIMES_CONSUMES ## GUID # TPM device identifier
|
|
gEfiTpmDeviceInstanceTpm12Guid ## SOMETIMES_CONSUMES ## GUID # TPM device identifier
|
|
|
|
[Protocols]
|
|
gEfiTrEEProtocolGuid ## PRODUCES
|
|
gEfiAcpiTableProtocolGuid ## NOTIFY
|
|
gEfiMpServiceProtocolGuid ## SOMETIMES_CONSUMES
|
|
gEfiVariableWriteArchProtocolGuid ## NOTIFY
|
|
|
|
[Pcd]
|
|
gEfiSecurityPkgTokenSpaceGuid.PcdTpmPlatformClass ## SOMETIMES_CONSUMES
|
|
gEfiSecurityPkgTokenSpaceGuid.PcdFirmwareDebuggerInitialized ## SOMETIMES_CONSUMES
|
|
gEfiSecurityPkgTokenSpaceGuid.PcdTpmInstanceGuid ## CONSUMES
|
|
gEfiSecurityPkgTokenSpaceGuid.PcdTpmBaseAddress ## SOMETIMES_CONSUMES
|
|
gEfiMdeModulePkgTokenSpaceGuid.PcdAcpiDefaultOemId ## SOMETIMES_CONSUMES
|
|
gEfiMdeModulePkgTokenSpaceGuid.PcdAcpiDefaultOemTableId ## SOMETIMES_CONSUMES
|
|
gEfiMdeModulePkgTokenSpaceGuid.PcdAcpiDefaultOemRevision ## SOMETIMES_CONSUMES
|
|
gEfiMdeModulePkgTokenSpaceGuid.PcdAcpiDefaultCreatorId ## SOMETIMES_CONSUMES
|
|
gEfiMdeModulePkgTokenSpaceGuid.PcdAcpiDefaultCreatorRevision ## SOMETIMES_CONSUMES
|
|
gEfiSecurityPkgTokenSpaceGuid.PcdStatusCodeSubClassTpmDevice ## SOMETIMES_CONSUMES
|
|
|
|
[Depex]
|
|
TRUE
|
|
|
|
[UserExtensions.TianoCore."ExtraFiles"]
|
|
TrEEDxeExtra.uni
|