bridgingcommands:Fix for Get Message command
Updated channel permissions for Get Message command in
ipmi-whitelist.conf
Tested:
1. Verified using cmdtool utility and clear linux OS.
2. Enable ProvisionedHostWhitelist mode (KCS trust policy) and verified.
Verified executing from BMC.
Command: ipmitool raw 0x06 0x33 //Get Message
Response: Unable to send RAW command (channel=0x0 netfn=0x6 lun=0x0
cmd=0x33 rsp=0xd4): Insufficient privilege level
Verified from system interface using cmdtool utility and Clear linux.
Command: cmdtool.efi 20 18 33 //Get Message
Response: 80 //no data available
Verified using Clear Linux (System Interface)
Note: OpenIPMI driver provided by the Linux kernel will reject the
Get Message command because it handles the message sequencing
internally.
https://manpages.debian.org/testing/ipmitool/ipmitool.1.en.html
Signed-off-by: Jayaprakash Mutyala <mutyalax.jayaprakash@intel.com>
Change-Id: Ica41829523fa17a4009cded5fa89b2d94595d6d1
diff --git a/ipmi-whitelist.conf b/ipmi-whitelist.conf
index 9b6b983..2615d91 100644
--- a/ipmi-whitelist.conf
+++ b/ipmi-whitelist.conf
@@ -51,7 +51,7 @@
0x06:0x2f:0xffff //<App>:<Get BMC Global Enables>
0x06:0x30:0x8080 //<App>:<Clear Message Flags>
0x06:0x31:0x8080 //<App>:<Get Message Flags>
-0x06:0x33:0x8000 //<App>:<Get Message>
+0x06:0x33:0x8080 //<App>:<Get Message>
0x06:0x34:0x7f7f //<App>:<Send Message>
0x06:0x35:0x8080 //<App>:<Read Event Message Buffer>
0x06:0x37:0xff7f //<App>:<Get System GUID>