proxmox-mirrors/fwupd
1
0
Fork 0
mirror of https://git.proxmox.com/git/fwupd synced 2025-06-14 16:01:08 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

trivial: pci-psp: Link FwupdBiosAttr to FwupdSecurityAttr when TSME off

Browse Source 
Lenovo Z13 offers a BIOS setting called "TSME" that can be potentially
controlled from firmware-attributes API.
This commit is contained in:
Mario Limonciello 2022-07-29 00:36:15 -05:00 committed by Mario Limonciello
parent 64df25d0e7
commit e07eb9afab
1 changed files with 10 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
plugins/pci-psp/fu-plugin-pci-psp.c
View File

@ -52,8 +52,9 @@ fu_plugin_pci_psp_get_attr(FwupdSecurityAttr *attr,
} }
static void static void
fu_plugin_add_security_attrs_tsme(const gchar *path, FuSecurityAttrs *attrs) fu_plugin_add_security_attrs_tsme(FuPlugin *plugin, const gchar *path, FuSecurityAttrs *attrs)
{ {
FwupdBiosAttr *bios_attr;
g_autoptr(FwupdSecurityAttr) attr = NULL; g_autoptr(FwupdSecurityAttr) attr = NULL;
g_autoptr(GError) error_local = NULL; g_autoptr(GError) error_local = NULL;
gboolean val; gboolean val;
@ -67,6 +68,13 @@ fu_plugin_add_security_attrs_tsme(const gchar *path, FuSecurityAttrs *attrs)
return; return;
} }
/* BIOS knob used on Lenovo systems */
bios_attr = fu_context_get_bios_attr(fu_plugin_get_context(plugin), "com.thinklmi.TSME");
if (bios_attr != NULL) {
fwupd_security_attr_set_bios_attr_id(attr, fwupd_bios_attr_get_id(bios_attr));
fu_bios_attr_set_preferred_value(bios_attr, "enable");
}
if (!val) { if (!val) {
fwupd_security_attr_set_result(attr, FWUPD_SECURITY_ATTR_RESULT_NOT_ENCRYPTED); fwupd_security_attr_set_result(attr, FWUPD_SECURITY_ATTR_RESULT_NOT_ENCRYPTED);
fwupd_security_attr_add_flag(attr, FWUPD_SECURITY_ATTR_FLAG_ACTION_CONFIG_FW); fwupd_security_attr_add_flag(attr, FWUPD_SECURITY_ATTR_FLAG_ACTION_CONFIG_FW);
@ -267,7 +275,7 @@ fu_plugin_pci_psp_add_security_attrs(FuPlugin *plugin, FuSecurityAttrs *attrs)
return; return;
} }
fu_plugin_add_security_attrs_tsme(sysfs_path, attrs); fu_plugin_add_security_attrs_tsme(plugin, sysfs_path, attrs);
fu_plugin_add_security_attrs_fused_part(sysfs_path, attrs); fu_plugin_add_security_attrs_fused_part(sysfs_path, attrs);
fu_plugin_add_security_attrs_debug_locked_part(sysfs_path, attrs); fu_plugin_add_security_attrs_debug_locked_part(sysfs_path, attrs);
fu_plugin_add_security_attrs_rollback_protection(sysfs_path, attrs); fu_plugin_add_security_attrs_rollback_protection(sysfs_path, attrs);