Create an OEM Intel IPMI whitelist filter
This is a derivative of the upstream whitelist filter that also tracks
the host state as part of the filtering information.
In addition, the filter understands per-channel filtering, so a command
can be filtered out on a per-channel basis.
Tested: With the upstream filter disabled, and this filter enabled, run
several checks:
1) execute a command prior to host POST completete over kcs (OK)
2) execute a command after host POST complete (denied)
3) execute a command filtered on a lan interface
4) execute a command whitelisted on a lan interface
Change-Id: I9b6755f4bf2c9b9e30de0289f1fed68b3709dea0
Signed-off-by: Vernon Mauery <vernon.mauery@linux.intel.com>
4 files changed