diff options
Diffstat (limited to 'Documentation/ABI/testing/configfs-tsm')
-rw-r--r-- | Documentation/ABI/testing/configfs-tsm | 145 |
1 files changed, 0 insertions, 145 deletions
diff --git a/Documentation/ABI/testing/configfs-tsm b/Documentation/ABI/testing/configfs-tsm deleted file mode 100644 index 534408bc1408..000000000000 --- a/Documentation/ABI/testing/configfs-tsm +++ /dev/null @@ -1,145 +0,0 @@ -What: /sys/kernel/config/tsm/report/$name/inblob -Date: September, 2023 -KernelVersion: v6.7 -Contact: linux-coco@lists.linux.dev -Description: - (WO) Up to 64 bytes of user specified binary data. For replay - protection this should include a nonce, but the kernel does not - place any restrictions on the content. - -What: /sys/kernel/config/tsm/report/$name/outblob -Date: September, 2023 -KernelVersion: v6.7 -Contact: linux-coco@lists.linux.dev -Description: - (RO) Binary attestation report generated from @inblob and other - options The format of the report is implementation specific - where the implementation is conveyed via the @provider - attribute. - -What: /sys/kernel/config/tsm/report/$name/auxblob -Date: October, 2023 -KernelVersion: v6.7 -Contact: linux-coco@lists.linux.dev -Description: - (RO) Optional supplemental data that a TSM may emit, visibility - of this attribute depends on TSM, and may be empty if no - auxiliary data is available. - - When @provider is "sev_guest" this file contains the - "cert_table" from SEV-ES Guest-Hypervisor Communication Block - Standardization v2.03 Section 4.1.8.1 MSG_REPORT_REQ. - https://www.amd.com/content/dam/amd/en/documents/epyc-technical-docs/specifications/56421.pdf - -What: /sys/kernel/config/tsm/report/$name/manifestblob -Date: January, 2024 -KernelVersion: v6.10 -Contact: linux-coco@lists.linux.dev -Description: - (RO) Optional supplemental data that a TSM may emit, visibility - of this attribute depends on TSM, and may be empty if no - manifest data is available. - - See 'service_provider' for information on the format of the - manifest blob. - -What: /sys/kernel/config/tsm/report/$name/provider -Date: September, 2023 -KernelVersion: v6.7 -Contact: linux-coco@lists.linux.dev -Description: - (RO) A name for the format-specification of @outblob like - "sev_guest" [1] or "tdx_guest" [2] in the near term, or a - common standard format in the future. - - [1]: SEV Secure Nested Paging Firmware ABI Specification - Revision 1.55 Table 22 - https://www.amd.com/content/dam/amd/en/documents/epyc-technical-docs/specifications/56860.pdf - - [2]: IntelĀ® Trust Domain Extensions Data Center Attestation - Primitives : Quote Generation Library and Quote Verification - Library Revision 0.8 Appendix 4,5 - https://download.01.org/intel-sgx/latest/dcap-latest/linux/docs/Intel_TDX_DCAP_Quoting_Library_API.pdf - -What: /sys/kernel/config/tsm/report/$name/generation -Date: September, 2023 -KernelVersion: v6.7 -Contact: linux-coco@lists.linux.dev -Description: - (RO) The value in this attribute increments each time @inblob or - any option is written. Userspace can detect conflicts by - checking generation before writing to any attribute and making - sure the number of writes matches expectations after reading - @outblob, or it can prevent conflicts by creating a report - instance per requesting context. - -What: /sys/kernel/config/tsm/report/$name/privlevel -Date: September, 2023 -KernelVersion: v6.7 -Contact: linux-coco@lists.linux.dev -Description: - (WO) Attribute is visible if a TSM implementation provider - supports the concept of attestation reports for TVMs running at - different privilege levels, like SEV-SNP "VMPL", specify the - privilege level via this attribute. The minimum acceptable - value is conveyed via @privlevel_floor and the maximum - acceptable value is TSM_PRIVLEVEL_MAX (3). - -What: /sys/kernel/config/tsm/report/$name/privlevel_floor -Date: September, 2023 -KernelVersion: v6.7 -Contact: linux-coco@lists.linux.dev -Description: - (RO) Indicates the minimum permissible value that can be written - to @privlevel. - -What: /sys/kernel/config/tsm/report/$name/service_provider -Date: January, 2024 -KernelVersion: v6.10 -Contact: linux-coco@lists.linux.dev -Description: - (WO) Attribute is visible if a TSM implementation provider - supports the concept of attestation reports from a service - provider for TVMs, like SEV-SNP running under an SVSM. - Specifying the service provider via this attribute will create - an attestation report as specified by the service provider. - The only currently supported service provider is "svsm". - - For the "svsm" service provider, see the Secure VM Service Module - for SEV-SNP Guests v1.00 Section 7. For the doc, search for - "site:amd.com "Secure VM Service Module for SEV-SNP - Guests", docID: 58019" - -What: /sys/kernel/config/tsm/report/$name/service_guid -Date: January, 2024 -KernelVersion: v6.10 -Contact: linux-coco@lists.linux.dev -Description: - (WO) Attribute is visible if a TSM implementation provider - supports the concept of attestation reports from a service - provider for TVMs, like SEV-SNP running under an SVSM. - Specifying an empty/null GUID (00000000-0000-0000-0000-000000) - requests all active services within the service provider be - part of the attestation report. Specifying a GUID request - an attestation report of just the specified service using the - manifest form specified by the service_manifest_version - attribute. - - See 'service_provider' for information on the format of the - service guid. - -What: /sys/kernel/config/tsm/report/$name/service_manifest_version -Date: January, 2024 -KernelVersion: v6.10 -Contact: linux-coco@lists.linux.dev -Description: - (WO) Attribute is visible if a TSM implementation provider - supports the concept of attestation reports from a service - provider for TVMs, like SEV-SNP running under an SVSM. - Indicates the service manifest version requested for the - attestation report (default 0). If this field is not set by - the user, the default manifest version of the service (the - service's initial/first manifest version) is returned. - - See 'service_provider' for information on the format of the - service manifest version. |