From 8dc886ce314282de9d65fac1e8c68ee40d30f678 Mon Sep 17 00:00:00 2001 From: Ilias Apalodimas Date: Tue, 24 Dec 2024 08:01:08 -0800 Subject: tpm: Don't create an EventLog if algorithms are misconfigured We already check the active banks vs what U-Boot was compiled with when trying to extend a PCR and we refuse to do so if the TPM active ones don't match the ones U-Boot supports. Do the same thing for the EventLog creation since extending will fail anyway and print a message so the user can figure out the missing algorithms. Co-developed-by: Raymond Mao Signed-off-by: Raymond Mao Signed-off-by: Ilias Apalodimas --- include/tpm-v2.h | 7 +++++++ 1 file changed, 7 insertions(+) (limited to 'include') diff --git a/include/tpm-v2.h b/include/tpm-v2.h index c49eadda26c..6b3f2175b77 100644 --- a/include/tpm-v2.h +++ b/include/tpm-v2.h @@ -770,4 +770,11 @@ bool tpm2_check_active_banks(struct udevice *dev); */ bool tpm2_is_active_bank(struct tpms_pcr_selection *selection); +/** + * tpm2_print_active_banks() - Print the active TPM PCRs + * + * @dev: TPM device + */ +void tpm2_print_active_banks(struct udevice *dev); + #endif /* __TPM_V2_H */ -- cgit v1.2.3