50 static struct key *nvdimm_request_key(struct nvdimm *nvdimm)  in nvdimm_request_key()  argument
55 	struct device *dev = &nvdimm->dev;  in nvdimm_request_key()
57 	sprintf(desc, "%s%s", NVDIMM_PREFIX, nvdimm->dimm_id);  in nvdimm_request_key()
80 static const void *nvdimm_get_key_payload(struct nvdimm *nvdimm,  in nvdimm_get_key_payload()  argument
83 	*key = nvdimm_request_key(nvdimm);  in nvdimm_get_key_payload()
90 static struct key *nvdimm_lookup_user_key(struct nvdimm *nvdimm,  in nvdimm_lookup_user_key()  argument
96 	struct device *dev = &nvdimm->dev;  in nvdimm_lookup_user_key()
120 static const void *nvdimm_get_user_key_payload(struct nvdimm *nvdimm,  in nvdimm_get_user_key_payload()  argument
131 	*key = nvdimm_lookup_user_key(nvdimm, id, subclass);  in nvdimm_get_user_key_payload()
139 static int nvdimm_key_revalidate(struct nvdimm *nvdimm)  in nvdimm_key_revalidate()  argument
145 	if (!nvdimm->sec.ops->change_key)  in nvdimm_key_revalidate()
148 	data = nvdimm_get_key_payload(nvdimm, &key);  in nvdimm_key_revalidate()
154 	rc = nvdimm->sec.ops->change_key(nvdimm, data, data, NVDIMM_USER);  in nvdimm_key_revalidate()
161 	nvdimm->sec.flags = nvdimm_security_flags(nvdimm, NVDIMM_USER);  in nvdimm_key_revalidate()
165 static int __nvdimm_security_unlock(struct nvdimm *nvdimm)  in __nvdimm_security_unlock()  argument
167 	struct device *dev = &nvdimm->dev;  in __nvdimm_security_unlock()
176 	if (!nvdimm->sec.ops || !nvdimm->sec.ops->unlock  in __nvdimm_security_unlock()
177 			|| !nvdimm->sec.flags)  in __nvdimm_security_unlock()
181 	if (test_bit(NVDIMM_SECURITY_DISABLED, &nvdimm->sec.flags))  in __nvdimm_security_unlock()
184 	if (test_bit(NDD_SECURITY_OVERWRITE, &nvdimm->flags)) {  in __nvdimm_security_unlock()
196 	if (test_bit(NVDIMM_SECURITY_UNLOCKED, &nvdimm->sec.flags)) {  in __nvdimm_security_unlock()
200 		return nvdimm_key_revalidate(nvdimm);  in __nvdimm_security_unlock()
202 		data = nvdimm_get_key_payload(nvdimm, &key);  in __nvdimm_security_unlock()
204 	rc = nvdimm->sec.ops->unlock(nvdimm, data);  in __nvdimm_security_unlock()
209 	nvdimm->sec.flags = nvdimm_security_flags(nvdimm, NVDIMM_USER);  in __nvdimm_security_unlock()
215 	struct nvdimm *nvdimm = to_nvdimm(dev);  in nvdimm_security_unlock()  local
219 	rc = __nvdimm_security_unlock(nvdimm);  in nvdimm_security_unlock()
224 static int check_security_state(struct nvdimm *nvdimm)  in check_security_state()  argument
226 	struct device *dev = &nvdimm->dev;  in check_security_state()
228 	if (test_bit(NVDIMM_SECURITY_FROZEN, &nvdimm->sec.flags)) {  in check_security_state()
230 				nvdimm->sec.flags);  in check_security_state()
234 	if (test_bit(NDD_SECURITY_OVERWRITE, &nvdimm->flags)) {  in check_security_state()
242 static int security_disable(struct nvdimm *nvdimm, unsigned int keyid)  in security_disable()  argument
244 	struct device *dev = &nvdimm->dev;  in security_disable()
253 	if (!nvdimm->sec.ops || !nvdimm->sec.ops->disable  in security_disable()
254 			|| !nvdimm->sec.flags)  in security_disable()
257 	rc = check_security_state(nvdimm);  in security_disable()
261 	data = nvdimm_get_user_key_payload(nvdimm, keyid,  in security_disable()
266 	rc = nvdimm->sec.ops->disable(nvdimm, data);  in security_disable()
271 	nvdimm->sec.flags = nvdimm_security_flags(nvdimm, NVDIMM_USER);  in security_disable()
275 static int security_update(struct nvdimm *nvdimm, unsigned int keyid,  in security_update()  argument
279 	struct device *dev = &nvdimm->dev;  in security_update()
288 	if (!nvdimm->sec.ops || !nvdimm->sec.ops->change_key  in security_update()
289 			|| !nvdimm->sec.flags)  in security_update()
292 	rc = check_security_state(nvdimm);  in security_update()
296 	data = nvdimm_get_user_key_payload(nvdimm, keyid,  in security_update()
301 	newdata = nvdimm_get_user_key_payload(nvdimm, new_keyid,  in security_update()
308 	rc = nvdimm->sec.ops->change_key(nvdimm, data, newdata, pass_type);  in security_update()
317 		nvdimm->sec.ext_flags = nvdimm_security_flags(nvdimm,  in security_update()
320 		nvdimm->sec.flags = nvdimm_security_flags(nvdimm,  in security_update()
325 static int security_erase(struct nvdimm *nvdimm, unsigned int keyid,  in security_erase()  argument
328 	struct device *dev = &nvdimm->dev;  in security_erase()
337 	if (!nvdimm->sec.ops || !nvdimm->sec.ops->erase  in security_erase()
338 			|| !nvdimm->sec.flags)  in security_erase()
341 	rc = check_security_state(nvdimm);  in security_erase()
345 	if (!test_bit(NVDIMM_SECURITY_UNLOCKED, &nvdimm->sec.ext_flags)  in security_erase()
352 	data = nvdimm_get_user_key_payload(nvdimm, keyid,  in security_erase()
357 	rc = nvdimm->sec.ops->erase(nvdimm, data, pass_type);  in security_erase()
363 	nvdimm->sec.flags = nvdimm_security_flags(nvdimm, NVDIMM_USER);  in security_erase()
367 static int security_overwrite(struct nvdimm *nvdimm, unsigned int keyid)  in security_overwrite()  argument
369 	struct device *dev = &nvdimm->dev;  in security_overwrite()
378 	if (!nvdimm->sec.ops || !nvdimm->sec.ops->overwrite  in security_overwrite()
379 			|| !nvdimm->sec.flags)  in security_overwrite()
387 	rc = check_security_state(nvdimm);  in security_overwrite()
391 	data = nvdimm_get_user_key_payload(nvdimm, keyid,  in security_overwrite()
396 	rc = nvdimm->sec.ops->overwrite(nvdimm, data);  in security_overwrite()
402 		set_bit(NDD_SECURITY_OVERWRITE, &nvdimm->flags);  in security_overwrite()
403 		set_bit(NDD_WORK_PENDING, &nvdimm->flags);  in security_overwrite()
404 		set_bit(NVDIMM_SECURITY_OVERWRITE, &nvdimm->sec.flags);  in security_overwrite()
410 		queue_delayed_work(system_wq, &nvdimm->dwork, 0);  in security_overwrite()
416 void __nvdimm_security_overwrite_query(struct nvdimm *nvdimm)  in __nvdimm_security_overwrite_query()  argument
418 	struct nvdimm_bus *nvdimm_bus = walk_to_nvdimm_bus(&nvdimm->dev);  in __nvdimm_security_overwrite_query()
429 	if (!test_bit(NDD_WORK_PENDING, &nvdimm->flags))  in __nvdimm_security_overwrite_query()
432 	tmo = nvdimm->sec.overwrite_tmo;  in __nvdimm_security_overwrite_query()
434 	if (!nvdimm->sec.ops || !nvdimm->sec.ops->query_overwrite  in __nvdimm_security_overwrite_query()
435 			|| !nvdimm->sec.flags)  in __nvdimm_security_overwrite_query()
438 	rc = nvdimm->sec.ops->query_overwrite(nvdimm);  in __nvdimm_security_overwrite_query()
443 		queue_delayed_work(system_wq, &nvdimm->dwork, tmo * HZ);  in __nvdimm_security_overwrite_query()
444 		nvdimm->sec.overwrite_tmo = min(15U * 60U, tmo);  in __nvdimm_security_overwrite_query()
449 		dev_dbg(&nvdimm->dev, "overwrite failed\n");  in __nvdimm_security_overwrite_query()
451 		dev_dbg(&nvdimm->dev, "overwrite completed\n");  in __nvdimm_security_overwrite_query()
458 	nvdimm->sec.overwrite_tmo = 0;  in __nvdimm_security_overwrite_query()
459 	clear_bit(NDD_SECURITY_OVERWRITE, &nvdimm->flags);  in __nvdimm_security_overwrite_query()
460 	clear_bit(NDD_WORK_PENDING, &nvdimm->flags);  in __nvdimm_security_overwrite_query()
461 	nvdimm->sec.flags = nvdimm_security_flags(nvdimm, NVDIMM_USER);  in __nvdimm_security_overwrite_query()
462 	nvdimm->sec.ext_flags = nvdimm_security_flags(nvdimm, NVDIMM_MASTER);  in __nvdimm_security_overwrite_query()
463 	if (nvdimm->sec.overwrite_state)  in __nvdimm_security_overwrite_query()
464 		sysfs_notify_dirent(nvdimm->sec.overwrite_state);  in __nvdimm_security_overwrite_query()
465 	put_device(&nvdimm->dev);  in __nvdimm_security_overwrite_query()
470 	struct nvdimm *nvdimm =  in nvdimm_security_overwrite_query()  local
471 		container_of(work, typeof(*nvdimm), dwork.work);  in nvdimm_security_overwrite_query()
473 	nvdimm_bus_lock(&nvdimm->dev);  in nvdimm_security_overwrite_query()
474 	__nvdimm_security_overwrite_query(nvdimm);  in nvdimm_security_overwrite_query()
475 	nvdimm_bus_unlock(&nvdimm->dev);  in nvdimm_security_overwrite_query()
502 	struct nvdimm *nvdimm = to_nvdimm(dev);  in nvdimm_security_store()  local
529 		rc = nvdimm_security_freeze(nvdimm);  in nvdimm_security_store()
532 		rc = security_disable(nvdimm, key);  in nvdimm_security_store()
535 		rc = security_update(nvdimm, key, newkey, i == OP_UPDATE  in nvdimm_security_store()
539 		if (atomic_read(&nvdimm->busy)) {  in nvdimm_security_store()
543 		rc = security_erase(nvdimm, key, i == OP_ERASE  in nvdimm_security_store()
547 		if (atomic_read(&nvdimm->busy)) {  in nvdimm_security_store()
551 		rc = security_overwrite(nvdimm, key);  in nvdimm_security_store()