drivers/char/tpm/tpm_eventlog.c

   1 /*
   2  * Copyright (C) 2005, 2012 IBM Corporation
   3  *
   4  * Authors:
   5  *      Kent Yoder <[email protected]>
   6  *      Seiji Munetoh <[email protected]>
   7  *      Stefan Berger <[email protected]>
   8  *      Reiner Sailer <[email protected]>
   9  *      Kylene Hall <[email protected]>
  10  *
  11  * Maintained by: <[email protected]>
  12  *
  13  * Access to the eventlog created by a system's firmware / BIOS
  14  *
  15  * This program is free software; you can redistribute it and/or
  16  * modify it under the terms of the GNU General Public License
  17  * as published by the Free Software Foundation; either version
  18  * 2 of the License, or (at your option) any later version.
  19  *
  20  */
  21
  22 #include <linux/seq_file.h>
  23 #include <linux/fs.h>
  24 #include <linux/security.h>
  25 #include <linux/module.h>
  26 #include <linux/slab.h>
  27
  28 #include "tpm.h"
  29 #include "tpm_eventlog.h"
  30
  31
  32 static const char* tcpa_event_type_strings[] = {
  33         "PREBOOT",
  34         "POST CODE",
  35         "",
  36         "NO ACTION",
  37         "SEPARATOR",
  38         "ACTION",
  39         "EVENT TAG",
  40         "S-CRTM Contents",
  41         "S-CRTM Version",
  42         "CPU Microcode",
  43         "Platform Config Flags",
  44         "Table of Devices",
  45         "Compact Hash",
  46         "IPL",
  47         "IPL Partition Data",
  48         "Non-Host Code",
  49         "Non-Host Config",
  50         "Non-Host Info"
  51 };
  52
  53 static const char* tcpa_pc_event_id_strings[] = {
  54         "",
  55         "SMBIOS",
  56         "BIS Certificate",
  57         "POST BIOS ",
  58         "ESCD ",
  59         "CMOS",
  60         "NVRAM",
  61         "Option ROM",
  62         "Option ROM config",
  63         "",
  64         "Option ROM microcode ",
  65         "S-CRTM Version",
  66         "S-CRTM Contents ",
  67         "POST Contents ",
  68         "Table of Devices",
  69 };
  70
  71 /* returns pointer to start of pos. entry of tcg log */
  72 static void *tpm_bios_measurements_start(struct seq_file *m, loff_t *pos)
  73 {
  74         loff_t i;
  75         struct tpm_bios_log *log = m->private;
  76         void *addr = log->bios_event_log;
  77         void *limit = log->bios_event_log_end;
  78         struct tcpa_event *event;
  79
  80         /* read over *pos measurements */
  81         for (i = 0; i < *pos; i++) {
  82                 event = addr;
  83
  84                 if ((addr + sizeof(struct tcpa_event)) < limit) {
  85                         if (event->event_type == 0 && event->event_size == 0)
  86                                 return NULL;
  87                         addr += sizeof(struct tcpa_event) + event->event_size;
  88                 }
  89         }
  90
  91         /* now check if current entry is valid */
  92         if ((addr + sizeof(struct tcpa_event)) >= limit)
  93                 return NULL;
  94
  95         event = addr;
  96
  97         if ((event->event_type == 0 && event->event_size == 0) ||
  98             ((addr + sizeof(struct tcpa_event) + event->event_size) >= limit))
  99                 return NULL;
 100
 101         return addr;
 102 }
 103
 104 static void *tpm_bios_measurements_next(struct seq_file *m, void *v,
 105                                         loff_t *pos)
 106 {
 107         struct tcpa_event *event = v;
 108         struct tpm_bios_log *log = m->private;
 109         void *limit = log->bios_event_log_end;
 110
 111         v += sizeof(struct tcpa_event) + event->event_size;
 112
 113         /* now check if current entry is valid */
 114         if ((v + sizeof(struct tcpa_event)) >= limit)
 115                 return NULL;
 116
 117         event = v;
 118
 119         if (event->event_type == 0 && event->event_size == 0)
 120                 return NULL;
 121
 122         if ((event->event_type == 0 && event->event_size == 0) ||
 123             ((v + sizeof(struct tcpa_event) + event->event_size) >= limit))
 124                 return NULL;
 125
 126         (*pos)++;
 127         return v;
 128 }
 129
 130 static void tpm_bios_measurements_stop(struct seq_file *m, void *v)
 131 {
 132 }
 133
 134 static int get_event_name(char *dest, struct tcpa_event *event,
 135                         unsigned char * event_entry)
 136 {
 137         const char *name = "";
 138         /* 41 so there is room for 40 data and 1 nul */
 139         char data[41] = "";
 140         int i, n_len = 0, d_len = 0;
 141         struct tcpa_pc_event *pc_event;
 142
 143         switch(event->event_type) {
 144         case PREBOOT:
 145         case POST_CODE:
 146         case UNUSED:
 147         case NO_ACTION:
 148         case SCRTM_CONTENTS:
 149         case SCRTM_VERSION:
 150         case CPU_MICROCODE:
 151         case PLATFORM_CONFIG_FLAGS:
 152         case TABLE_OF_DEVICES:
 153         case COMPACT_HASH:
 154         case IPL:
 155         case IPL_PARTITION_DATA:
 156         case NONHOST_CODE:
 157         case NONHOST_CONFIG:
 158         case NONHOST_INFO:
 159                 name = tcpa_event_type_strings[event->event_type];
 160                 n_len = strlen(name);
 161                 break;
 162         case SEPARATOR:
 163         case ACTION:
 164                 if (MAX_TEXT_EVENT > event->event_size) {
 165                         name = event_entry;
 166                         n_len = event->event_size;
 167                 }
 168                 break;
 169         case EVENT_TAG:
 170                 pc_event = (struct tcpa_pc_event *)event_entry;
 171
 172                 /* ToDo Row data -> Base64 */
 173
 174                 switch (pc_event->event_id) {
 175                 case SMBIOS:
 176                 case BIS_CERT:
 177                 case CMOS:
 178                 case NVRAM:
 179                 case OPTION_ROM_EXEC:
 180                 case OPTION_ROM_CONFIG:
 181                 case S_CRTM_VERSION:
 182                         name = tcpa_pc_event_id_strings[pc_event->event_id];
 183                         n_len = strlen(name);
 184                         break;
 185                 /* hash data */
 186                 case POST_BIOS_ROM:
 187                 case ESCD:
 188                 case OPTION_ROM_MICROCODE:
 189                 case S_CRTM_CONTENTS:
 190                 case POST_CONTENTS:
 191                         name = tcpa_pc_event_id_strings[pc_event->event_id];
 192                         n_len = strlen(name);
 193                         for (i = 0; i < 20; i++)
 194                                 d_len += sprintf(&data[2*i], "%02x",
 195                                                 pc_event->event_data[i]);
 196                         break;
 197                 default:
 198                         break;
 199                 }
 200         default:
 201                 break;
 202         }
 203
 204         return snprintf(dest, MAX_TEXT_EVENT, "[%.*s%.*s]",
 205                         n_len, name, d_len, data);
 206
 207 }
 208
 209 static int tpm_binary_bios_measurements_show(struct seq_file *m, void *v)
 210 {
 211         struct tcpa_event *event = v;
 212         char *data = v;
 213         int i;
 214
 215         for (i = 0; i < sizeof(struct tcpa_event) + event->event_size; i++)
 216                 seq_putc(m, data[i]);
 217
 218         return 0;
 219 }
 220
 221 static int tpm_bios_measurements_release(struct inode *inode,
 222                                          struct file *file)
 223 {
 224         struct seq_file *seq = file->private_data;
 225         struct tpm_bios_log *log = seq->private;
 226
 227         if (log) {
 228                 kfree(log->bios_event_log);
 229                 kfree(log);
 230         }
 231
 232         return seq_release(inode, file);
 233 }
 234
 235 static int tpm_ascii_bios_measurements_show(struct seq_file *m, void *v)
 236 {
 237         int len = 0;
 238         char *eventname;
 239         struct tcpa_event *event = v;
 240         unsigned char *event_entry =
 241             (unsigned char *) (v + sizeof(struct tcpa_event));
 242
 243         eventname = kmalloc(MAX_TEXT_EVENT, GFP_KERNEL);
 244         if (!eventname) {
 245                 printk(KERN_ERR "%s: ERROR - No Memory for event name\n ",
 246                        __func__);
 247                 return -EFAULT;
 248         }
 249
 250         seq_printf(m, "%2d ", event->pcr_index);
 251
 252         /* 2nd: SHA1 */
 253         seq_printf(m, "%20phN", event->pcr_value);
 254
 255         /* 3rd: event type identifier */
 256         seq_printf(m, " %02x", event->event_type);
 257
 258         len += get_event_name(eventname, event, event_entry);
 259
 260         /* 4th: eventname <= max + \'0' delimiter */
 261         seq_printf(m, " %s\n", eventname);
 262
 263         kfree(eventname);
 264         return 0;
 265 }
 266
 267 static const struct seq_operations tpm_ascii_b_measurments_seqops = {
 268         .start = tpm_bios_measurements_start,
 269         .next = tpm_bios_measurements_next,
 270         .stop = tpm_bios_measurements_stop,
 271         .show = tpm_ascii_bios_measurements_show,
 272 };
 273
 274 static const struct seq_operations tpm_binary_b_measurments_seqops = {
 275         .start = tpm_bios_measurements_start,
 276         .next = tpm_bios_measurements_next,
 277         .stop = tpm_bios_measurements_stop,
 278         .show = tpm_binary_bios_measurements_show,
 279 };
 280
 281 static int tpm_ascii_bios_measurements_open(struct inode *inode,
 282                                             struct file *file)
 283 {
 284         int err;
 285         struct tpm_bios_log *log;
 286         struct seq_file *seq;
 287
 288         log = kzalloc(sizeof(struct tpm_bios_log), GFP_KERNEL);
 289         if (!log)
 290                 return -ENOMEM;
 291
 292         if ((err = read_log(log)))
 293                 goto out_free;
 294
 295         /* now register seq file */
 296         err = seq_open(file, &tpm_ascii_b_measurments_seqops);
 297         if (!err) {
 298                 seq = file->private_data;
 299                 seq->private = log;
 300         } else {
 301                 goto out_free;
 302         }
 303
 304 out:
 305         return err;
 306 out_free:
 307         kfree(log->bios_event_log);
 308         kfree(log);
 309         goto out;
 310 }
 311
 312 static const struct file_operations tpm_ascii_bios_measurements_ops = {
 313         .open = tpm_ascii_bios_measurements_open,
 314         .read = seq_read,
 315         .llseek = seq_lseek,
 316         .release = tpm_bios_measurements_release,
 317 };
 318
 319 static int tpm_binary_bios_measurements_open(struct inode *inode,
 320                                              struct file *file)
 321 {
 322         int err;
 323         struct tpm_bios_log *log;
 324         struct seq_file *seq;
 325
 326         log = kzalloc(sizeof(struct tpm_bios_log), GFP_KERNEL);
 327         if (!log)
 328                 return -ENOMEM;
 329
 330         if ((err = read_log(log)))
 331                 goto out_free;
 332
 333         /* now register seq file */
 334         err = seq_open(file, &tpm_binary_b_measurments_seqops);
 335         if (!err) {
 336                 seq = file->private_data;
 337                 seq->private = log;
 338         } else {
 339                 goto out_free;
 340         }
 341
 342 out:
 343         return err;
 344 out_free:
 345         kfree(log->bios_event_log);
 346         kfree(log);
 347         goto out;
 348 }
 349
 350 static const struct file_operations tpm_binary_bios_measurements_ops = {
 351         .open = tpm_binary_bios_measurements_open,
 352         .read = seq_read,
 353         .llseek = seq_lseek,
 354         .release = tpm_bios_measurements_release,
 355 };
 356
 357 static int is_bad(void *p)
 358 {
 359         if (!p)
 360                 return 1;
 361         if (IS_ERR(p) && (PTR_ERR(p) != -ENODEV))
 362                 return 1;
 363         return 0;
 364 }
 365
 366 struct dentry **tpm_bios_log_setup(char *name)
 367 {
 368         struct dentry **ret = NULL, *tpm_dir, *bin_file, *ascii_file;
 369
 370         tpm_dir = securityfs_create_dir(name, NULL);
 371         if (is_bad(tpm_dir))
 372                 goto out;
 373
 374         bin_file =
 375             securityfs_create_file("binary_bios_measurements",
 376                                    S_IRUSR | S_IRGRP, tpm_dir, NULL,
 377                                    &tpm_binary_bios_measurements_ops);
 378         if (is_bad(bin_file))
 379                 goto out_tpm;
 380
 381         ascii_file =
 382             securityfs_create_file("ascii_bios_measurements",
 383                                    S_IRUSR | S_IRGRP, tpm_dir, NULL,
 384                                    &tpm_ascii_bios_measurements_ops);
 385         if (is_bad(ascii_file))
 386                 goto out_bin;
 387
 388         ret = kmalloc(3 * sizeof(struct dentry *), GFP_KERNEL);
 389         if (!ret)
 390                 goto out_ascii;
 391
 392         ret[0] = ascii_file;
 393         ret[1] = bin_file;
 394         ret[2] = tpm_dir;
 395
 396         return ret;
 397
 398 out_ascii:
 399         securityfs_remove(ascii_file);
 400 out_bin:
 401         securityfs_remove(bin_file);
 402 out_tpm:
 403         securityfs_remove(tpm_dir);
 404 out:
 405         return NULL;
 406 }
 407
 408 void tpm_bios_log_teardown(struct dentry **lst)
 409 {
 410         int i;
 411
 412         for (i = 0; i < 3; i++)
 413                 securityfs_remove(lst[i]);
 414 }