Jarkko Sakkinen 8c657a0590 KEYS: trusted: Reserve TPM for seal and unseal operations ... When TPM 2.0 trusted keys code was moved to the trusted keys subsystem, the operations were unwrapped from tpm_try_get_ops() and tpm_put_ops(), which are used to take temporarily the ownership of the TPM chip. The ownership is only taken inside tpm_send(), but this is not sufficient, as in the key load TPM2_CC_LOAD, TPM2_CC_UNSEAL and TPM2_FLUSH_CONTEXT need to be done as a one single atom. Take the TPM chip ownership before sending anything with tpm_try_get_ops() and tpm_put_ops(), and use tpm_transmit_cmd() to send TPM commands instead of tpm_send(), reverting back to the old behaviour. Fixes: 2e19e10131 ("KEYS: trusted: Move TPM2 trusted keys code") Reported-by: "James E.J. Bottomley" <James.Bottomley@HansenPartnership.com> Cc: stable@vger.kernel.org Cc: David Howells <dhowells@redhat.com> Cc: Mimi Zohar <zohar@linux.ibm.com> Cc: Sumit Garg <sumit.garg@linaro.org> Acked-by Sumit Garg <sumit.garg@linaro.org> Tested-by: Mimi Zohar <zohar@linux.ibm.com> Signed-off-by: Jarkko Sakkinen <jarkko@kernel.org>		2021-02-16 10:40:28 +02:00
..
Makefile	KEYS: trusted: Move TPM2 trusted keys code	2019-11-12 21:45:37 +02:00
trusted_tpm1.c	KEYS: trusted: Fix migratable=1 failing	2021-02-16 10:40:28 +02:00
trusted_tpm2.c	KEYS: trusted: Reserve TPM for seal and unseal operations	2021-02-16 10:40:28 +02:00