mirror of
https://github.com/ibm-s390-linux/s390-tools.git
synced 2026-08-05 02:14:52 +00:00
b7c9c2679e
IBM Secure Execution guests may want to share additional secrets with the Ultravisor in a secure manner. For this the concept of secret requests and three new Ultravisor-calls were introduced. Add support to genprotimg to prepare an Secure Execution image with the requirement that add-secret requests must provide an extension secret that matches the customer communication key (CCK) derived extension secret. Reviewed-by: Steffen Eiden <seiden@linux.ibm.com> Signed-off-by: Marc Hartmayer <mhartmay@linux.ibm.com> Signed-off-by: Jan Höppner <hoeppner@linux.ibm.com>
76 lines
1.7 KiB
C
76 lines
1.7 KiB
C
/*
|
|
* PV arguments related definitions and functions
|
|
*
|
|
* Copyright IBM Corp. 2020
|
|
*
|
|
* s390-tools is free software; you can redistribute it and/or modify
|
|
* it under the terms of the MIT license. See LICENSE for details.
|
|
*/
|
|
|
|
#ifndef PV_ARGS_H
|
|
#define PV_ARGS_H
|
|
|
|
#include <glib.h>
|
|
|
|
#include "pv_comp.h"
|
|
|
|
typedef struct pv_arg {
|
|
PvComponentType type;
|
|
gchar *path;
|
|
} PvArg;
|
|
|
|
PvArg *pv_arg_new(PvComponentType type, const gchar *path);
|
|
void pv_arg_free(PvArg *arg);
|
|
|
|
typedef enum pv_tristate {
|
|
PV_NOT_SET = 0,
|
|
PV_TRUE,
|
|
PV_FALSE,
|
|
} PvTristate;
|
|
/* The value of PV_NOT_SET is not allowed to be changed */
|
|
STATIC_ASSERT(PV_NOT_SET == 0)
|
|
|
|
typedef struct {
|
|
gchar *pcf;
|
|
gchar *scf;
|
|
/* Add-secret requests do require CCK-extension secrets */
|
|
PvTristate enable_cck_extension_secret_enforcement;
|
|
PvTristate enable_dump;
|
|
PvTristate enable_pckmo;
|
|
} PvControlFlagsArgs;
|
|
|
|
typedef struct {
|
|
gint log_level;
|
|
gint no_verify;
|
|
gboolean offline;
|
|
PvControlFlagsArgs cf_args;
|
|
gchar *psw_addr; /* PSW address which will be used for the start of
|
|
* the actual component (e.g. Linux kernel)
|
|
*/
|
|
gchar *cust_root_key_path;
|
|
gchar *cust_comm_key_path;
|
|
gchar *gcm_iv_path;
|
|
gchar **host_keys;
|
|
gchar *root_ca_path; /* Trusted root CA used for the verification of the
|
|
* chain of trust (if specified).
|
|
*/
|
|
gchar **untrusted_cert_paths;
|
|
gchar **crl_paths;
|
|
gchar *xts_key_path;
|
|
GSList *comps;
|
|
gchar *output_path;
|
|
gchar *tmp_dir;
|
|
GPtrArray *unused_values;
|
|
} PvArgs;
|
|
|
|
PvArgs *pv_args_new(void);
|
|
void pv_args_free(PvArgs *args);
|
|
|
|
gint pv_args_parse_options(PvArgs *args, gint *argc, gchar **argv[],
|
|
GError **err);
|
|
|
|
WRAPPED_G_DEFINE_AUTOPTR_CLEANUP_FUNC(PvArg, pv_arg_free)
|
|
WRAPPED_G_DEFINE_AUTOPTR_CLEANUP_FUNC(PvArgs, pv_args_free)
|
|
|
|
#endif
|