| commit | 544fd006147d2a7d7cadff5de42be6c443154096 | [log] [tgz] |
|---|---|---|
| author | Jayaprakash Mutyala <mutyalax.jayaprakash@intel.com> | Mon Nov 23 01:54:36 2020 +0000 |
| committer | AppaRao Puli <apparao.puli@linux.intel.com> | Tue Dec 29 02:52:30 2020 +0000 |
| tree | 9b2edf304c1f50c8850f5a47d139a925a96c6a60 | |
| parent | fe9a7000c5658a621710aef2611a3a801dc1d937 [diff] |
ipmi-whitelist:Allow set securitymode cmd from KCS
Issue: Issuing set security mode for Provisioned Host Disabled command
is restricted from KCS channel.
Fix: Allow set security mode command execution from KCS interface by
adding channel mask in ipmi-whitelist.conf
Tested:
Verified using ipmitool raw command from Linux OS
1. Set restriction mode as ProvisionedHostWhitelist
Command: busctl set-property xyz.openbmc_project.RestrictionMode.Manager
/xyz/openbmc_project/control/security/restriction_mode
xyz.openbmc_project.Control.Security.RestrictionMode
RestrictionMode s
"xyz.openbmc_project.Control.Security.RestrictionMode.Modes.
ProvisionedHostWhitelist"
Response: //Success
2. Check the restriction mode
Command: ipmitool raw 0x30 0xb3
Response: 04 00
3. Execute set security mode for Provisioned Host Disabled command from
Linux OS terminal
Command: ipmitool raw 0x30 0xb4 0x5
Response: //Success
Signed-off-by: Jayaprakash Mutyala <mutyalax.jayaprakash@intel.com>
Change-Id: Id1214d98d2d8db385af9f7dba493b3c1b02459ba
This component is intended to provide Intel-specific IPMI[3] command handlers for OpenBMC. These handlers are intended to integrate BMC with servers based on Intel architecture.
intel-ipmi-oem serves as an extension[1] to OpenBMC IPMI daemon[2]. It is compiled as a shared library and intended to both:
Related features provided by the library are grouped in separate source files. Main extensions to vanilla OpenBMC IPMI stack are the following:
[4]