hw/arm: add control knob to disable kaslr_seed via DTB
authorAlex Bennée <alex.bennee@linaro.org>
Wed, 5 Jan 2022 13:49:56 +0000 (13:49 +0000)
committerAlex Bennée <alex.bennee@linaro.org>
Tue, 18 Jan 2022 16:42:42 +0000 (16:42 +0000)
commit33973e1e1f88b7588fe9629645e279ff2c6ca1c4
treebddb1128cb4c4346513d2744a5fc413b02bce852
parent7bef20d72985c5da4082d198ad175715272cd50c
hw/arm: add control knob to disable kaslr_seed via DTB

Generally a guest needs an external source of randomness to properly
enable things like address space randomisation. However in a trusted
boot environment where the firmware will cryptographically verify
components having random data in the DTB will cause verification to
fail. Add a control knob so we can prevent this being added to the
system DTB.

Signed-off-by: Alex Bennée <alex.bennee@linaro.org>
Tested-by: Heinrich Schuchardt <xypron.glpk@gmx.de>
Acked-by: Ilias Apalodimas <ilias.apalodimas@linaro.org>
Acked-by: Jerome Forissier <jerome@forissier.org>
Reviewed-by: Andrew Jones <drjones@redhat.com>
Message-Id: <20220105135009.1584676-22-alex.bennee@linaro.org>
docs/system/arm/virt.rst
hw/arm/virt.c
include/hw/arm/virt.h