11a8916eeSNayna Jain // SPDX-License-Identifier: GPL-2.0
21a8916eeSNayna Jain /*
31a8916eeSNayna Jain * Copyright (C) 2019 IBM Corporation
41a8916eeSNayna Jain * Author: Nayna Jain
51a8916eeSNayna Jain */
61a8916eeSNayna Jain #include <linux/types.h>
71a8916eeSNayna Jain #include <linux/of.h>
81a8916eeSNayna Jain #include <asm/secure_boot.h>
91a8916eeSNayna Jain
get_ppc_fw_sb_node(void)101a8916eeSNayna Jain static struct device_node *get_ppc_fw_sb_node(void)
111a8916eeSNayna Jain {
121a8916eeSNayna Jain static const struct of_device_id ids[] = {
131a8916eeSNayna Jain { .compatible = "ibm,secureboot", },
141a8916eeSNayna Jain { .compatible = "ibm,secureboot-v1", },
151a8916eeSNayna Jain { .compatible = "ibm,secureboot-v2", },
161a8916eeSNayna Jain {},
171a8916eeSNayna Jain };
181a8916eeSNayna Jain
191a8916eeSNayna Jain return of_find_matching_node(NULL, ids);
201a8916eeSNayna Jain }
211a8916eeSNayna Jain
is_ppc_secureboot_enabled(void)221a8916eeSNayna Jain bool is_ppc_secureboot_enabled(void)
231a8916eeSNayna Jain {
241a8916eeSNayna Jain struct device_node *node;
251a8916eeSNayna Jain bool enabled = false;
2661f879d9SNayna Jain u32 secureboot;
271a8916eeSNayna Jain
281a8916eeSNayna Jain node = get_ppc_fw_sb_node();
291a8916eeSNayna Jain enabled = of_property_read_bool(node, "os-secureboot-enforcing");
301a8916eeSNayna Jain of_node_put(node);
311a8916eeSNayna Jain
3261f879d9SNayna Jain if (enabled)
3361f879d9SNayna Jain goto out;
3461f879d9SNayna Jain
35*2a066ae1SChristophe Leroy node = of_find_node_by_path("/");
36*2a066ae1SChristophe Leroy if (!of_property_read_u32(node, "ibm,secure-boot", &secureboot))
3761f879d9SNayna Jain enabled = (secureboot > 1);
38*2a066ae1SChristophe Leroy of_node_put(node);
3961f879d9SNayna Jain
4061f879d9SNayna Jain out:
411a8916eeSNayna Jain pr_info("Secure boot mode %s\n", enabled ? "enabled" : "disabled");
421a8916eeSNayna Jain
431a8916eeSNayna Jain return enabled;
441a8916eeSNayna Jain }
452702809aSNayna Jain
is_ppc_trustedboot_enabled(void)462702809aSNayna Jain bool is_ppc_trustedboot_enabled(void)
472702809aSNayna Jain {
482702809aSNayna Jain struct device_node *node;
492702809aSNayna Jain bool enabled = false;
5061f879d9SNayna Jain u32 trustedboot;
512702809aSNayna Jain
522702809aSNayna Jain node = get_ppc_fw_sb_node();
532702809aSNayna Jain enabled = of_property_read_bool(node, "trusted-enabled");
542702809aSNayna Jain of_node_put(node);
552702809aSNayna Jain
5661f879d9SNayna Jain if (enabled)
5761f879d9SNayna Jain goto out;
5861f879d9SNayna Jain
59*2a066ae1SChristophe Leroy node = of_find_node_by_path("/");
60*2a066ae1SChristophe Leroy if (!of_property_read_u32(node, "ibm,trusted-boot", &trustedboot))
6161f879d9SNayna Jain enabled = (trustedboot > 0);
62*2a066ae1SChristophe Leroy of_node_put(node);
6361f879d9SNayna Jain
6461f879d9SNayna Jain out:
652702809aSNayna Jain pr_info("Trusted boot mode %s\n", enabled ? "enabled" : "disabled");
662702809aSNayna Jain
672702809aSNayna Jain return enabled;
682702809aSNayna Jain }
69