Loading...
1// SPDX-License-Identifier: GPL-2.0+
2/*
3 * Copyright (C) 2019 IBM Corporation <nayna@linux.ibm.com>
4 *
5 * This code exposes secure variables to user via sysfs
6 */
7
8#define pr_fmt(fmt) "secvar-sysfs: "fmt
9
10#include <linux/slab.h>
11#include <linux/compat.h>
12#include <linux/string.h>
13#include <linux/of.h>
14#include <asm/secvar.h>
15
16#define NAME_MAX_SIZE 1024
17
18static struct kobject *secvar_kobj;
19static struct kset *secvar_kset;
20
21static ssize_t format_show(struct kobject *kobj, struct kobj_attribute *attr,
22 char *buf)
23{
24 char tmp[32];
25 ssize_t len = secvar_ops->format(tmp, sizeof(tmp));
26
27 if (len > 0)
28 return sysfs_emit(buf, "%s\n", tmp);
29 else if (len < 0)
30 pr_err("Error %zd reading format string\n", len);
31 else
32 pr_err("Got empty format string from backend\n");
33
34 return -EIO;
35}
36
37
38static ssize_t size_show(struct kobject *kobj, struct kobj_attribute *attr,
39 char *buf)
40{
41 u64 dsize;
42 int rc;
43
44 rc = secvar_ops->get(kobj->name, strlen(kobj->name) + 1, NULL, &dsize);
45 if (rc) {
46 if (rc != -ENOENT)
47 pr_err("Error retrieving %s variable size %d\n", kobj->name, rc);
48 return rc;
49 }
50
51 return sysfs_emit(buf, "%llu\n", dsize);
52}
53
54static ssize_t data_read(struct file *filep, struct kobject *kobj,
55 struct bin_attribute *attr, char *buf, loff_t off,
56 size_t count)
57{
58 char *data;
59 u64 dsize;
60 int rc;
61
62 rc = secvar_ops->get(kobj->name, strlen(kobj->name) + 1, NULL, &dsize);
63 if (rc) {
64 if (rc != -ENOENT)
65 pr_err("Error getting %s variable size %d\n", kobj->name, rc);
66 return rc;
67 }
68 pr_debug("dsize is %llu\n", dsize);
69
70 data = kzalloc(dsize, GFP_KERNEL);
71 if (!data)
72 return -ENOMEM;
73
74 rc = secvar_ops->get(kobj->name, strlen(kobj->name) + 1, data, &dsize);
75 if (rc) {
76 pr_err("Error getting %s variable %d\n", kobj->name, rc);
77 goto data_fail;
78 }
79
80 rc = memory_read_from_buffer(buf, count, &off, data, dsize);
81
82data_fail:
83 kfree(data);
84 return rc;
85}
86
87static ssize_t update_write(struct file *filep, struct kobject *kobj,
88 struct bin_attribute *attr, char *buf, loff_t off,
89 size_t count)
90{
91 int rc;
92
93 pr_debug("count is %ld\n", count);
94 rc = secvar_ops->set(kobj->name, strlen(kobj->name) + 1, buf, count);
95 if (rc) {
96 pr_err("Error setting the %s variable %d\n", kobj->name, rc);
97 return rc;
98 }
99
100 return count;
101}
102
103static struct kobj_attribute format_attr = __ATTR_RO(format);
104
105static struct kobj_attribute size_attr = __ATTR_RO(size);
106
107static struct bin_attribute data_attr = __BIN_ATTR_RO(data, 0);
108
109static struct bin_attribute update_attr = __BIN_ATTR_WO(update, 0);
110
111static struct bin_attribute *secvar_bin_attrs[] = {
112 &data_attr,
113 &update_attr,
114 NULL,
115};
116
117static struct attribute *secvar_attrs[] = {
118 &size_attr.attr,
119 NULL,
120};
121
122static const struct attribute_group secvar_attr_group = {
123 .attrs = secvar_attrs,
124 .bin_attrs = secvar_bin_attrs,
125};
126__ATTRIBUTE_GROUPS(secvar_attr);
127
128static struct kobj_type secvar_ktype = {
129 .sysfs_ops = &kobj_sysfs_ops,
130 .default_groups = secvar_attr_groups,
131};
132
133static int update_kobj_size(void)
134{
135
136 u64 varsize;
137 int rc = secvar_ops->max_size(&varsize);
138
139 if (rc)
140 return rc;
141
142 data_attr.size = varsize;
143 update_attr.size = varsize;
144
145 return 0;
146}
147
148static int secvar_sysfs_config(struct kobject *kobj)
149{
150 struct attribute_group config_group = {
151 .name = "config",
152 .attrs = (struct attribute **)secvar_ops->config_attrs,
153 };
154
155 if (secvar_ops->config_attrs)
156 return sysfs_create_group(kobj, &config_group);
157
158 return 0;
159}
160
161static int add_var(const char *name)
162{
163 struct kobject *kobj;
164 int rc;
165
166 kobj = kzalloc(sizeof(*kobj), GFP_KERNEL);
167 if (!kobj)
168 return -ENOMEM;
169
170 kobject_init(kobj, &secvar_ktype);
171
172 rc = kobject_add(kobj, &secvar_kset->kobj, "%s", name);
173 if (rc) {
174 pr_warn("kobject_add error %d for attribute: %s\n", rc,
175 name);
176 kobject_put(kobj);
177 return rc;
178 }
179
180 kobject_uevent(kobj, KOBJ_ADD);
181 return 0;
182}
183
184static int secvar_sysfs_load(void)
185{
186 u64 namesize = 0;
187 char *name;
188 int rc;
189
190 name = kzalloc(NAME_MAX_SIZE, GFP_KERNEL);
191 if (!name)
192 return -ENOMEM;
193
194 do {
195 rc = secvar_ops->get_next(name, &namesize, NAME_MAX_SIZE);
196 if (rc) {
197 if (rc != -ENOENT)
198 pr_err("error getting secvar from firmware %d\n", rc);
199 else
200 rc = 0;
201
202 break;
203 }
204
205 rc = add_var(name);
206 } while (!rc);
207
208 kfree(name);
209 return rc;
210}
211
212static int secvar_sysfs_load_static(void)
213{
214 const char * const *name_ptr = secvar_ops->var_names;
215 int rc;
216
217 while (*name_ptr) {
218 rc = add_var(*name_ptr);
219 if (rc)
220 return rc;
221 name_ptr++;
222 }
223
224 return 0;
225}
226
227static int secvar_sysfs_init(void)
228{
229 u64 max_size;
230 int rc;
231
232 if (!secvar_ops) {
233 pr_warn("Failed to retrieve secvar operations\n");
234 return -ENODEV;
235 }
236
237 secvar_kobj = kobject_create_and_add("secvar", firmware_kobj);
238 if (!secvar_kobj) {
239 pr_err("Failed to create firmware kobj\n");
240 return -ENOMEM;
241 }
242
243 rc = sysfs_create_file(secvar_kobj, &format_attr.attr);
244 if (rc) {
245 pr_err("Failed to create format object\n");
246 rc = -ENOMEM;
247 goto err;
248 }
249
250 secvar_kset = kset_create_and_add("vars", NULL, secvar_kobj);
251 if (!secvar_kset) {
252 pr_err("sysfs kobject registration failed\n");
253 rc = -ENOMEM;
254 goto err;
255 }
256
257 rc = update_kobj_size();
258 if (rc) {
259 pr_err("Cannot read the size of the attribute\n");
260 goto err;
261 }
262
263 rc = secvar_sysfs_config(secvar_kobj);
264 if (rc) {
265 pr_err("Failed to create config directory\n");
266 goto err;
267 }
268
269 if (secvar_ops->get_next)
270 rc = secvar_sysfs_load();
271 else
272 rc = secvar_sysfs_load_static();
273
274 if (rc) {
275 pr_err("Failed to create variable attributes\n");
276 goto err;
277 }
278
279 // Due to sysfs limitations, we will only ever get a write buffer of
280 // up to 1 page in size. Print a warning if this is potentially going
281 // to cause problems, so that the user is aware.
282 secvar_ops->max_size(&max_size);
283 if (max_size > PAGE_SIZE)
284 pr_warn_ratelimited("PAGE_SIZE (%lu) is smaller than maximum object size (%llu), writes are limited to PAGE_SIZE\n",
285 PAGE_SIZE, max_size);
286
287 return 0;
288err:
289 kobject_put(secvar_kobj);
290 return rc;
291}
292
293late_initcall(secvar_sysfs_init);
1// SPDX-License-Identifier: GPL-2.0+
2/*
3 * Copyright (C) 2019 IBM Corporation <nayna@linux.ibm.com>
4 *
5 * This code exposes secure variables to user via sysfs
6 */
7
8#define pr_fmt(fmt) "secvar-sysfs: "fmt
9
10#include <linux/slab.h>
11#include <linux/compat.h>
12#include <linux/string.h>
13#include <linux/of.h>
14#include <asm/secvar.h>
15
16#define NAME_MAX_SIZE 1024
17
18static struct kobject *secvar_kobj;
19static struct kset *secvar_kset;
20
21static ssize_t format_show(struct kobject *kobj, struct kobj_attribute *attr,
22 char *buf)
23{
24 ssize_t rc = 0;
25 struct device_node *node;
26 const char *format;
27
28 node = of_find_compatible_node(NULL, NULL, "ibm,secvar-backend");
29 if (!of_device_is_available(node))
30 return -ENODEV;
31
32 rc = of_property_read_string(node, "format", &format);
33 if (rc)
34 return rc;
35
36 rc = sprintf(buf, "%s\n", format);
37
38 of_node_put(node);
39
40 return rc;
41}
42
43
44static ssize_t size_show(struct kobject *kobj, struct kobj_attribute *attr,
45 char *buf)
46{
47 uint64_t dsize;
48 int rc;
49
50 rc = secvar_ops->get(kobj->name, strlen(kobj->name) + 1, NULL, &dsize);
51 if (rc) {
52 pr_err("Error retrieving %s variable size %d\n", kobj->name,
53 rc);
54 return rc;
55 }
56
57 return sprintf(buf, "%llu\n", dsize);
58}
59
60static ssize_t data_read(struct file *filep, struct kobject *kobj,
61 struct bin_attribute *attr, char *buf, loff_t off,
62 size_t count)
63{
64 uint64_t dsize;
65 char *data;
66 int rc;
67
68 rc = secvar_ops->get(kobj->name, strlen(kobj->name) + 1, NULL, &dsize);
69 if (rc) {
70 pr_err("Error getting %s variable size %d\n", kobj->name, rc);
71 return rc;
72 }
73 pr_debug("dsize is %llu\n", dsize);
74
75 data = kzalloc(dsize, GFP_KERNEL);
76 if (!data)
77 return -ENOMEM;
78
79 rc = secvar_ops->get(kobj->name, strlen(kobj->name) + 1, data, &dsize);
80 if (rc) {
81 pr_err("Error getting %s variable %d\n", kobj->name, rc);
82 goto data_fail;
83 }
84
85 rc = memory_read_from_buffer(buf, count, &off, data, dsize);
86
87data_fail:
88 kfree(data);
89 return rc;
90}
91
92static ssize_t update_write(struct file *filep, struct kobject *kobj,
93 struct bin_attribute *attr, char *buf, loff_t off,
94 size_t count)
95{
96 int rc;
97
98 pr_debug("count is %ld\n", count);
99 rc = secvar_ops->set(kobj->name, strlen(kobj->name) + 1, buf, count);
100 if (rc) {
101 pr_err("Error setting the %s variable %d\n", kobj->name, rc);
102 return rc;
103 }
104
105 return count;
106}
107
108static struct kobj_attribute format_attr = __ATTR_RO(format);
109
110static struct kobj_attribute size_attr = __ATTR_RO(size);
111
112static struct bin_attribute data_attr = __BIN_ATTR_RO(data, 0);
113
114static struct bin_attribute update_attr = __BIN_ATTR_WO(update, 0);
115
116static struct bin_attribute *secvar_bin_attrs[] = {
117 &data_attr,
118 &update_attr,
119 NULL,
120};
121
122static struct attribute *secvar_attrs[] = {
123 &size_attr.attr,
124 NULL,
125};
126
127static const struct attribute_group secvar_attr_group = {
128 .attrs = secvar_attrs,
129 .bin_attrs = secvar_bin_attrs,
130};
131__ATTRIBUTE_GROUPS(secvar_attr);
132
133static struct kobj_type secvar_ktype = {
134 .sysfs_ops = &kobj_sysfs_ops,
135 .default_groups = secvar_attr_groups,
136};
137
138static int update_kobj_size(void)
139{
140
141 struct device_node *node;
142 u64 varsize;
143 int rc = 0;
144
145 node = of_find_compatible_node(NULL, NULL, "ibm,secvar-backend");
146 if (!of_device_is_available(node)) {
147 rc = -ENODEV;
148 goto out;
149 }
150
151 rc = of_property_read_u64(node, "max-var-size", &varsize);
152 if (rc)
153 goto out;
154
155 data_attr.size = varsize;
156 update_attr.size = varsize;
157
158out:
159 of_node_put(node);
160
161 return rc;
162}
163
164static int secvar_sysfs_load(void)
165{
166 char *name;
167 uint64_t namesize = 0;
168 struct kobject *kobj;
169 int rc;
170
171 name = kzalloc(NAME_MAX_SIZE, GFP_KERNEL);
172 if (!name)
173 return -ENOMEM;
174
175 do {
176 rc = secvar_ops->get_next(name, &namesize, NAME_MAX_SIZE);
177 if (rc) {
178 if (rc != -ENOENT)
179 pr_err("error getting secvar from firmware %d\n",
180 rc);
181 break;
182 }
183
184 kobj = kzalloc(sizeof(*kobj), GFP_KERNEL);
185 if (!kobj) {
186 rc = -ENOMEM;
187 break;
188 }
189
190 kobject_init(kobj, &secvar_ktype);
191
192 rc = kobject_add(kobj, &secvar_kset->kobj, "%s", name);
193 if (rc) {
194 pr_warn("kobject_add error %d for attribute: %s\n", rc,
195 name);
196 kobject_put(kobj);
197 kobj = NULL;
198 }
199
200 if (kobj)
201 kobject_uevent(kobj, KOBJ_ADD);
202
203 } while (!rc);
204
205 kfree(name);
206 return rc;
207}
208
209static int secvar_sysfs_init(void)
210{
211 int rc;
212
213 if (!secvar_ops) {
214 pr_warn("secvar: failed to retrieve secvar operations.\n");
215 return -ENODEV;
216 }
217
218 secvar_kobj = kobject_create_and_add("secvar", firmware_kobj);
219 if (!secvar_kobj) {
220 pr_err("secvar: Failed to create firmware kobj\n");
221 return -ENOMEM;
222 }
223
224 rc = sysfs_create_file(secvar_kobj, &format_attr.attr);
225 if (rc) {
226 kobject_put(secvar_kobj);
227 return -ENOMEM;
228 }
229
230 secvar_kset = kset_create_and_add("vars", NULL, secvar_kobj);
231 if (!secvar_kset) {
232 pr_err("secvar: sysfs kobject registration failed.\n");
233 kobject_put(secvar_kobj);
234 return -ENOMEM;
235 }
236
237 rc = update_kobj_size();
238 if (rc) {
239 pr_err("Cannot read the size of the attribute\n");
240 return rc;
241 }
242
243 secvar_sysfs_load();
244
245 return 0;
246}
247
248late_initcall(secvar_sysfs_init);