Re: [PATCH v5 04/10] PCI/TSM: Authenticate devices via platform TSM

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 





On 9/9/25 11:52, dan.j.williams@xxxxxxxxx wrote:
Alexey Kardashevskiy wrote:


On 9/9/25 10:41, dan.j.williams@xxxxxxxxx wrote:
Alexey Kardashevskiy wrote:
So PCI_EXP_DEVCAP_TEE means that there may be a DSM,

This bit I am not sure about. A bit hard to believe that PF0 is always expected to support passing through to a CVM. Thanks,

I am losing track of your specific feedback, or what changes or being

I've reread the thread, I wrongly assumed "tee" is used to decide whether to show "connect" in sysfs or not. I guess I was a bit tired^woverwhelmed when I made that comment, my bad.


suggested here is the summary of what the spec assumptions and what the
core supports:

Spec assumptions:
- DEVCAP_TEE on a physical function is independent of IDE cap

Right, I just want to make sure that PF0 that manages TEE VFs does not have to have the TEE bit itself.

It does. Otherwise, how do you tell the difference between a device that
that only supports Component Measurement and Authentication (CMA) in
isolation vs a device that support CMA *and* TDISP requests?

I'd check for IDE (not just CMA), and then I'll ask the TSM about TDISP (my PSP asks the PF0 for TDISP version at the very end of DEV_CONNECT). It is the TSM which does all this IDE_KM and TDISP stuff anyway.

And how do I tell if PF0 allows TDIs or not? Try binding and see it failing if it does not? Same thing imho.

Now, the PCI/TSM core will still attach if that PF0 device has IDE,
without DEVCAP_TEE, but that support is incidental.

Sure, I am trying to clarify the PCIe language here, none of this is a showstopper really. Thanks,

--
Alexey





[Index of Archives]     [DMA Engine]     [Linux Coverity]     [Linux USB]     [Video for Linux]     [Linux Audio Users]     [Yosemite News]     [Linux Kernel]     [Linux SCSI]     [Greybus]

  Powered by Linux