commit 8d8d731d6a638331527c64f6a8e3fa3c830ba04c
author Andrew Geissler <geissonator@yahoo.com> Fri Mar 04 14:42:26 2022 -0600
committer Andrew Geissler <andrew@geissonator.com> Wed Apr 27 01:02:25 2022 +0000
tree 7034d76cdf4be4db367e8eb8c1c271522f2c8518
parent 6b9421b9323cf0b9fa9a655140eed729915f4e94

secure-boot: check sysfs debug settings

These aspeed-specific settings are provided via the kernels sysfs
filesystem. They provide information on the security of the BMC.

Follow on commits will check if the BMC is in manufacturing mode and log
an error if the system does not pass the security check.

Signed-off-by: Andrew Geissler <geissonator@yahoo.com>
Change-Id: Iddcc09dc34133806abe33570c5422bde51981bdb

meson_options.txt

diff --git a/meson_options.txt b/meson_options.txt
index f042b64..64a5b7e 100644
--- a/meson_options.txt
+++ b/meson_options.txt
@@ -110,3 +110,12 @@
     description : 'The host gpios Dbus root.',
 )
 
+option('sysfs-secure-boot-path', type : 'string',
+    value : '/sys/kernel/debug/aspeed/sbc/secure_boot',
+    description : 'The sysfs path to the secure boot value.',
+)
+
+option('sysfs-abr-image-path', type : 'string',
+    value : '/sys/kernel/debug/aspeed/sbc/abr_image',
+    description : 'The sysfs path to the abr image value.',
+)