linux-kernel - Re: [PATCH] firmware: export x86_64 platform flash bios region via sysfs

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <YY4PHacrS4czhEx3@kroah.com>
Date:   Fri, 12 Nov 2021 07:52:13 +0100
From:   Greg KH <gregkh@...uxfoundation.org>
To:     Richard Hughes <hughsient@...il.com>
Cc:     Andy Shevchenko <andy.shevchenko@...il.com>,
        Ard Biesheuvel <ardb@...nel.org>,
        Hans-Gert Dahmen <hans-gert.dahmen@...u.ne>,
        Mika Westerberg <mika.westerberg@...ux.intel.com>,
        Mauro Lima <mauro.lima@...ypsium.com>,
        "akpm@...ux-foundation.org" <akpm@...ux-foundation.org>,
        "linux-kernel@...r.kernel.org" <linux-kernel@...r.kernel.org>,
        Philipp Deppenwiese <philipp.deppenwiese@...u.ne>,
        "platform-driver-x86@...r.kernel.org" 
        <platform-driver-x86@...r.kernel.org>
Subject: Re: [PATCH] firmware: export x86_64 platform flash bios region via
 sysfs

On Thu, Nov 11, 2021 at 09:07:42PM +0000, Richard Hughes wrote:
> On Thu, 11 Nov 2021 at 15:50, Andy Shevchenko <andy.shevchenko@...il.com> wrote:
> > I was thinking about SHA256 hashes or so (as they tell about
> > binaries). In any case the interface for this seems to be in the
> > kernel.
> 
> I'm quite sure you don't want to put those EFI format decoders in the
> kernel; there is all kinds of weird compression schemes, volumes are
> recursive, and vendors like to hide weird things in the undocumented
> (or reserved) areas.

Why don't we just export these areas to userspace and let the decoding
of them happen there?  That's a real "thing" that the kernel can easily
detect is present and know to export properly as they are defined by the
UEFI specification, right?

Yes, that will not help for the non-UEFI x86 systems, but it's a
start...

thanks,

greg k-h