path: root/security/keys/trusted-keys/trusted_tpm2.c
diff options
authorJames Bottomley <>2019-12-12 12:58:35 -0500
committerJarkko Sakkinen <>2019-12-17 11:46:43 +0200
commit45477b3fe3d10376b649b1b85fce72b2f9f1da84 (patch)
treef69752a69b3338d21d95331963c7c86133d62cbf /security/keys/trusted-keys/trusted_tpm2.c
parent21df4a8b6018b842d4db181a8b24166006bad3cd (diff)
security: keys: trusted: fix lost handle flush
The original code, before it was moved into security/keys/trusted-keys had a flush after the blob unseal. Without that flush, the volatile handles increase in the TPM until it becomes unusable and the system either has to be rebooted or the TPM volatile area manually flushed. Fix by adding back the lost flush, which we now have to export because of the relocation of the trusted key code may cause the consumer to be modular. Signed-off-by: James Bottomley <> Fixes: 2e19e10131a0 ("KEYS: trusted: Move TPM2 trusted keys code") Reviewed-by: Jerry Snitselaar <> Reviewed-by: Jarkko Sakkinen <> Signed-off-by: Jarkko Sakkinen <>
Diffstat (limited to 'security/keys/trusted-keys/trusted_tpm2.c')
1 files changed, 1 insertions, 0 deletions
diff --git a/security/keys/trusted-keys/trusted_tpm2.c b/security/keys/trusted-keys/trusted_tpm2.c
index a9810ac2776f..08ec7f48f01d 100644
--- a/security/keys/trusted-keys/trusted_tpm2.c
+++ b/security/keys/trusted-keys/trusted_tpm2.c
@@ -309,6 +309,7 @@ int tpm2_unseal_trusted(struct tpm_chip *chip,
return rc;
rc = tpm2_unseal_cmd(chip, payload, options, blob_handle);
+ tpm2_flush_context(chip, blob_handle);
return rc;