diff options
author | Randall Spangler <rspangler@chromium.org> | 2012-06-19 10:03:53 -0700 |
---|---|---|
committer | Gerrit <chrome-bot@google.com> | 2012-08-15 14:31:53 -0700 |
commit | 29e8807ea045e119e3adeaec40c5f8421901b6fb (patch) | |
tree | 7cde1c7d68b710a9647e80890d19e02c718976c7 /firmware/linktest/main.c | |
parent | 59576e11e5120513f37658628b2b3bbf9827d471 (diff) | |
download | vboot-29e8807ea045e119e3adeaec40c5f8421901b6fb.tar.gz |
Add clear TPM owner request
This adds two new flags to crossystem:
clear_tpm_owner_request
clear_tpm_owner_done
The first one requests that the firmware clear the TPM owner on the
next boot. When the firmware does this, it will set
clear_tpm_owner_request=0, and set clear_tpm_owner_done=1. The OS can
use the done-flag as a hint that trusted things guarded by the TPM are
no longer trustable.
BUG=chromium-os:31974
TEST=manual
crossystem
// both flags initially 0
crossystem clear_tpm_owner_request=1
crossystem clear_tpm_owner_done=1
// request=1, done=0; done can be cleared but not set by crossystem
reboot
tpmc getownership
// owned=no
crossystem
// request=0, done=1
crossystem clear_tpm_owner_done=0
crossystem
// both flags 0 again
Signed-off-by: Randall Spangler <rspangler@chromium.org>
Change-Id: I49f83f3c39c3efc3945116c51a241d255c2e42cd
Reviewed-on: https://gerrit.chromium.org/gerrit/25646
Diffstat (limited to 'firmware/linktest/main.c')
-rw-r--r-- | firmware/linktest/main.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/firmware/linktest/main.c b/firmware/linktest/main.c index 020b589a..c5ce2c1c 100644 --- a/firmware/linktest/main.c +++ b/firmware/linktest/main.c @@ -1,4 +1,4 @@ -/* Copyright (c) 2011 The Chromium OS Authors. All rights reserved. +/* Copyright (c) 2012 The Chromium OS Authors. All rights reserved. * Use of this source code is governed by a BSD-style license that can be * found in the LICENSE file. */ @@ -29,7 +29,7 @@ int main(void) /* rollback_index.h */ RollbackS3Resume(); - RollbackFirmwareSetup(0, 0, 0, 0, 0); + RollbackFirmwareSetup(0, 0, 0, 0, 0, 0); RollbackFirmwareWrite(0); RollbackFirmwareLock(); RollbackKernelRead(0); |