proxmox-mirrors/fwupd
1
0
Fork 0
mirror of https://git.proxmox.com/git/fwupd synced 2025-07-26 06:07:54 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

trivial: clarify documentation on PSP security processor (Fixes: #5394)

Browse Source
This commit is contained in:
Mario Limonciello 2023-01-10 11:14:33 -06:00 committed by Mario Limonciello
parent 8d365e84de
commit 17d92d96be
1 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
docs/hsi-tests.d/org.fwupd.hsi.Amd.PlatformRollbackProtection.json
View File

@ -5,6 +5,10 @@
"AMD SOCs include the ability to prevent a rollback attack by a rollback protection feature on the secure processor.", "AMD SOCs include the ability to prevent a rollback attack by a rollback protection feature on the secure processor.",
"This feature prevents an attacker from loading an older firmware onto the part after a security vulnerability has been fixed." "This feature prevents an attacker from loading an older firmware onto the part after a security vulnerability has been fixed."
], ],
"more-information": [
"This particular check is not for the Microsoft Pluton Security processor which is present on some chips.",
"End users are not able to modify rollback protection, this is controlled by the manufacturer."
],
"failure-impact": [ "failure-impact": [
"SOCs without this feature may be attacked by an attacker installing an older firmware that takes advantage of a well-known vulnerability." "SOCs without this feature may be attacked by an attacker installing an older firmware that takes advantage of a well-known vulnerability."
], ],
@ -16,7 +20,8 @@
}, },
"hsi-level": 4, "hsi-level": 4,
"references": { "references": {
"https://www.psacertified.org/blog/anti-rollback-explained/": "Rollback protection" "https://www.psacertified.org/blog/anti-rollback-explained/": "Rollback protection",
"https://www.amd.com/en/technologies/pro-security" : "AMD Secure Processor"
}, },
"fwupd-version": "1.8.0" "fwupd-version": "1.8.0"
} }