Skip to content

Commit 805a74d

Browse files
committed
ArmVirtPkg/ArmVirtQemu: Use BlobVerifierLibArmCca
Use the Arm CCA BlobVerifier to add hashes of FwCfg images to the realm measurement. Signed-off-by: Jean-Philippe Brucker <[email protected]>
1 parent 6b09c02 commit 805a74d

File tree

2 files changed

+10
-0
lines changed

2 files changed

+10
-0
lines changed

ArmVirtPkg/ArmVirtQemu.dsc

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -106,6 +106,7 @@
106106
ArmPlatformLib|ArmVirtPkg/Library/ArmPlatformLibQemu/ArmPlatformLibQemu.inf
107107
ArmCcaLib|ArmVirtPkg/Library/ArmCcaLib/ArmCcaLib.inf
108108
ArmCcaRsiLib|ArmVirtPkg/Library/ArmCcaRsiLib/ArmCcaRsiLib.inf
109+
BlobVerifierLib|ArmVirtPkg/Library/BlobVerifierLibArmCca/BlobVerifierLibArmCca.inf
109110

110111
[LibraryClasses.ARM]
111112
ArmPlatformLib|ArmPlatformPkg/Library/ArmPlatformLibNull/ArmPlatformLibNull.inf
@@ -518,7 +519,11 @@
518519
MdeModulePkg/Application/BootManagerMenuApp/BootManagerMenuApp.inf
519520
OvmfPkg/QemuKernelLoaderFsDxe/QemuKernelLoaderFsDxe.inf {
520521
<LibraryClasses>
522+
!if $(ARCH) == AARCH64
523+
NULL|ArmVirtPkg/Library/BlobVerifierLibArmCca/BlobVerifierLibArmCca.inf
524+
!else
521525
NULL|OvmfPkg/Library/BlobVerifierLibNull/BlobVerifierLibNull.inf
526+
!endif
522527
}
523528

524529
#

ArmVirtPkg/ArmVirtQemuKernel.dsc

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -62,6 +62,7 @@
6262
ArmMmuLib|ArmPkg/Library/ArmMmuLib/ArmMmuBaseLib.inf
6363
ArmCcaLib|ArmVirtPkg/Library/ArmCcaLib/ArmCcaLib.inf
6464
ArmCcaRsiLib|ArmVirtPkg/Library/ArmCcaRsiLib/ArmCcaRsiLib.inf
65+
BlobVerifierLib|ArmVirtPkg/Library/BlobVerifierLibArmCca/BlobVerifierLibArmCca.inf
6566

6667
# Virtio Support
6768
VirtioLib|OvmfPkg/Library/VirtioLib/VirtioLib.inf
@@ -432,7 +433,11 @@
432433
MdeModulePkg/Application/BootManagerMenuApp/BootManagerMenuApp.inf
433434
OvmfPkg/QemuKernelLoaderFsDxe/QemuKernelLoaderFsDxe.inf {
434435
<LibraryClasses>
436+
!if $(ARCH) == AARCH64
437+
NULL|ArmVirtPkg/Library/BlobVerifierLibArmCca/BlobVerifierLibArmCca.inf
438+
!else
435439
NULL|OvmfPkg/Library/BlobVerifierLibNull/BlobVerifierLibNull.inf
440+
!endif
436441
}
437442

438443
#

0 commit comments

Comments
 (0)