diff options
| author |   Dave Jiang <dave.jiang@intel.com> | 2018-12-04 10:31:11 -0800 |
|---|---|---|
| committer |   Dan Williams <dan.j.williams@intel.com> | 2018-12-04 10:31:11 -0800 |
| commit | b3ed2ce024c36054e51cca2eb31a1cdbe4a5f11e (patch) | |
| tree | 6407ab38fea25437e92ddfbd5cf4104bdcf5b306 /include/linux/libnvdimm.h | |
| parent | Linux 4.20-rc5 (diff) | |
| download | wireguard-linux-b3ed2ce024c36054e51cca2eb31a1cdbe4a5f11e.tar.xz wireguard-linux-b3ed2ce024c36054e51cca2eb31a1cdbe4a5f11e.zip | |
acpi/nfit: Add support for Intel DSM 1.8 commands
Add command definition for security commands defined in Intel DSM
specification v1.8 [1]. This includes "get security state", "set
passphrase", "unlock unit", "freeze lock", "secure erase", "overwrite",
"overwrite query", "master passphrase enable/disable", and "master
erase", . Since this adds several Intel definitions, move the relevant
bits to their own header.
These commands mutate physical data, but that manipulation is not cache
coherent. The requirement to flush and invalidate caches makes these
commands unsuitable to be called from userspace, so extra logic is added
to detect and block these commands from being submitted via the ioctl
command submission path.
Lastly, the commands may contain sensitive key material that should not
be dumped in a standard debug session. Update the nvdimm-command
payload-dump facility to move security command payloads behind a
default-off compile time switch.
[1]: http://pmem.io/documents/NVDIMM_DSM_Interface-V1.8.pdf
Signed-off-by: Dave Jiang <dave.jiang@intel.com>
Signed-off-by: Dan Williams <dan.j.williams@intel.com>
Diffstat (limited to 'include/linux/libnvdimm.h')
| -rw-r--r-- | include/linux/libnvdimm.h | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/include/linux/libnvdimm.h b/include/linux/libnvdimm.h index 097072c5a852..472171af7f60 100644 --- a/include/linux/libnvdimm.h +++ b/include/linux/libnvdimm.h @@ -87,7 +87,7 @@ struct nvdimm_bus_descriptor { ndctl_fn ndctl; int (*flush_probe)(struct nvdimm_bus_descriptor *nd_desc); int (*clear_to_send)(struct nvdimm_bus_descriptor *nd_desc, - struct nvdimm *nvdimm, unsigned int cmd); + struct nvdimm *nvdimm, unsigned int cmd, void *data); }; struct nd_cmd_desc { |