Pull char/misc driver updates from Greg KH: "Here is the big set of char, misc, and other assorted driver subsystem patches for 5.10-rc1. There's a lot of different things in here, all over the drivers/ directory. Some summaries: - soundwire driver updates - habanalabs driver updates - extcon driver updates - nitro_enclaves new driver - fsl-mc driver and core updates - mhi core and bus updates - nvmem driver updates - eeprom driver updates - binder driver updates and fixes - vbox minor bugfixes - fsi driver updates - w1 driver updates - coresight driver updates - interconnect driver updates - misc driver updates - other minor driver updates All of these have been in linux-next for a while with no reported issues" * tag 'char-misc-5.10-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc: (396 commits) binder: fix UAF when releasing todo list docs: w1: w1_therm: Fix broken xref, mistakes, clarify text misc: Kconfig: fix a HISI_HIKEY_USB dependency LSM: Fix type of id parameter in kernel_post_load_data prototype misc: Kconfig: add a new dependency for HISI_HIKEY_USB firmware_loader: fix a kernel-doc markup w1: w1_therm: make w1_poll_completion static binder: simplify the return expression of binder_mmap test_firmware: Test partial read support firmware: Add request_partial_firmware_into_buf() firmware: Store opt_flags in fw_priv fs/kernel_file_read: Add "offset" arg for partial reads IMA: Add support for file reads without contents LSM: Add "contents" flag to kernel_read_file hook module: Call security_kernel_post_load_data() firmware_loader: Use security_post_load_data() LSM: Introduce kernel_post_load_data() hook fs/kernel_read_file: Add file_size output argument fs/kernel_read_file: Switch buffer size arg to size_t fs/kernel_read_file: Remove redundant size argument ...
Showing the changes to include/uapi/linux (3 of 297 files). Show all
Unified · Split
| @@ -5,6 +5,7 @@ · 4 unmodified lines | |||
| 5 | #include <linux/const.h> | 5 | #include <linux/const.h> |
| 6 | 6 | ||
| 7 | #define STM_FLAG_TIMESTAMPED _BITUL(3) | 7 | #define STM_FLAG_TIMESTAMPED _BITUL(3) |
| 8 | #define STM_FLAG_MARKED _BITUL(4) | ||
| 8 | #define STM_FLAG_GUARANTEED _BITUL(7) | 9 | #define STM_FLAG_GUARANTEED _BITUL(7) |
| 9 | 10 | ||
| 10 | /* | 11 | /* |
| @@ -66,4 +66,53 @@ struct mei_connect_client_data { · 65 unmodified lines | |||
| 66 | */ | 66 | */ |
| 67 | #define IOCTL_MEI_NOTIFY_GET _IOR('H', 0x03, __u32) | 67 | #define IOCTL_MEI_NOTIFY_GET _IOR('H', 0x03, __u32) |
| 68 | 68 | ||
| 69 | /** | ||
| 70 | * struct mei_connect_client_vtag - mei client information struct with vtag | ||
| 71 | * | ||
| 72 | * @in_client_uuid: UUID of client to connect | ||
| 73 | * @vtag: virtual tag | ||
| 74 | * @reserved: reserved for future use | ||
| 75 | */ | ||
| 76 | struct mei_connect_client_vtag { | ||
| 77 | uuid_le in_client_uuid; | ||
| 78 | __u8 vtag; | ||
| 79 | __u8 reserved[3]; | ||
| 80 | }; | ||
| 81 | |||
| 82 | /** | ||
| 83 | * struct mei_connect_client_data_vtag - IOCTL connect data union | ||
| 84 | * | ||
| 85 | * @connect: input connect data | ||
| 86 | * @out_client_properties: output client data | ||
| 87 | */ | ||
| 88 | struct mei_connect_client_data_vtag { | ||
| 89 | union { | ||
| 90 | struct mei_connect_client_vtag connect; | ||
| 91 | struct mei_client out_client_properties; | ||
| 92 | }; | ||
| 93 | }; | ||
| 94 | |||
| 95 | /** | ||
| 96 | * DOC: | ||
| 97 | * This IOCTL is used to associate the current file descriptor with a | ||
| 98 | * FW Client (given by UUID), and virtual tag (vtag). | ||
| 99 | * The IOCTL opens a communication channel between a host client and | ||
| 100 | * a FW client on a tagged channel. From this point on, every read | ||
| 101 | * and write will communicate with the associated FW client with | ||
| 102 | * on the tagged channel. | ||
| 103 | * Upone close() the communication is terminated. | ||
| 104 | * | ||
| 105 | * The IOCTL argument is a struct with a union that contains | ||
| 106 | * the input parameter and the output parameter for this IOCTL. | ||
| 107 | * | ||
| 108 | * The input parameter is UUID of the FW Client, a vtag [0,255] | ||
| 109 | * The output parameter is the properties of the FW client | ||
| 110 | * (FW protocool version and max message size). | ||
| 111 | * | ||
| 112 | * Clients that do not support tagged connection | ||
| 113 | * will respond with -EOPNOTSUPP. | ||
| 114 | */ | ||
| 115 | #define IOCTL_MEI_CONNECT_CLIENT_VTAG \ | ||
| 116 | _IOWR('H', 0x04, struct mei_connect_client_data_vtag) | ||
| 117 | |||
| 69 | #endif /* _LINUX_MEI_H */ | 118 | #endif /* _LINUX_MEI_H */ |
| @@ -0,0 +1,359 @@ | |||
| 1 | /* SPDX-License-Identifier: GPL-2.0 WITH Linux-syscall-note */ | ||
| 2 | /* | ||
| 3 | * Copyright 2020 Amazon.com, Inc. or its affiliates. All Rights Reserved. | ||
| 4 | */ | ||
| 5 | |||
| 6 | #ifndef _UAPI_LINUX_NITRO_ENCLAVES_H_ | ||
| 7 | #define _UAPI_LINUX_NITRO_ENCLAVES_H_ | ||
| 8 | |||
| 9 | #include <linux/types.h> | ||
| 10 | |||
| 11 | /** | ||
| 12 | * DOC: Nitro Enclaves (NE) Kernel Driver Interface | ||
| 13 | */ | ||
| 14 | |||
| 15 | /** | ||
| 16 | * NE_CREATE_VM - The command is used to create a slot that is associated with | ||
| 17 | * an enclave VM. | ||
| 18 | * The generated unique slot id is an output parameter. | ||
| 19 | * The ioctl can be invoked on the /dev/nitro_enclaves fd, before | ||
| 20 | * setting any resources, such as memory and vCPUs, for an | ||
| 21 | * enclave. Memory and vCPUs are set for the slot mapped to an enclave. | ||
| 22 | * A NE CPU pool has to be set before calling this function. The | ||
| 23 | * pool can be set after the NE driver load, using | ||
| 24 | * /sys/module/nitro_enclaves/parameters/ne_cpus. | ||
| 25 | * Its format is the detailed in the cpu-lists section: | ||
| 26 | * https://www.kernel.org/doc/html/latest/admin-guide/kernel-parameters.html | ||
| 27 | * CPU 0 and its siblings have to remain available for the | ||
| 28 | * primary / parent VM, so they cannot be set for enclaves. Full | ||
| 29 | * CPU core(s), from the same NUMA node, need(s) to be included | ||
| 30 | * in the CPU pool. | ||
| 31 | * | ||
| 32 | * Context: Process context. | ||
| 33 | * Return: | ||
| 34 | * * Enclave file descriptor - Enclave file descriptor used with | ||
| 35 | * ioctl calls to set vCPUs and memory | ||
| 36 | * regions, then start the enclave. | ||
| 37 | * * -1 - There was a failure in the ioctl logic. | ||
| 38 | * On failure, errno is set to: | ||
| 39 | * * EFAULT - copy_to_user() failure. | ||
| 40 | * * ENOMEM - Memory allocation failure for internal | ||
| 41 | * bookkeeping variables. | ||
| 42 | * * NE_ERR_NO_CPUS_AVAIL_IN_POOL - No NE CPU pool set / no CPUs available | ||
| 43 | * in the pool. | ||
| 44 | * * Error codes from get_unused_fd_flags() and anon_inode_getfile(). | ||
| 45 | * * Error codes from the NE PCI device request. | ||
| 46 | */ | ||
| 47 | #define NE_CREATE_VM _IOR(0xAE, 0x20, __u64) | ||
| 48 | |||
| 49 | /** | ||
| 50 | * NE_ADD_VCPU - The command is used to set a vCPU for an enclave. The vCPU can | ||
| 51 | * be auto-chosen from the NE CPU pool or it can be set by the | ||
| 52 | * caller, with the note that it needs to be available in the NE | ||
| 53 | * CPU pool. Full CPU core(s), from the same NUMA node, need(s) to | ||
| 54 | * be associated with an enclave. | ||
| 55 | * The vCPU id is an input / output parameter. If its value is 0, | ||
| 56 | * then a CPU is chosen from the enclave CPU pool and returned via | ||
| 57 | * this parameter. | ||
| 58 | * The ioctl can be invoked on the enclave fd, before an enclave | ||
| 59 | * is started. | ||
| 60 | * | ||
| 61 | * Context: Process context. | ||
| 62 | * Return: | ||
| 63 | * * 0 - Logic succesfully completed. | ||
| 64 | * * -1 - There was a failure in the ioctl logic. | ||
| 65 | * On failure, errno is set to: | ||
| 66 | * * EFAULT - copy_from_user() / copy_to_user() failure. | ||
| 67 | * * ENOMEM - Memory allocation failure for internal | ||
| 68 | * bookkeeping variables. | ||
| 69 | * * EIO - Current task mm is not the same as the one | ||
| 70 | * that created the enclave. | ||
| 71 | * * NE_ERR_NO_CPUS_AVAIL_IN_POOL - No CPUs available in the NE CPU pool. | ||
| 72 | * * NE_ERR_VCPU_ALREADY_USED - The provided vCPU is already used. | ||
| 73 | * * NE_ERR_VCPU_NOT_IN_CPU_POOL - The provided vCPU is not available in the | ||
| 74 | * NE CPU pool. | ||
| 75 | * * NE_ERR_VCPU_INVALID_CPU_CORE - The core id of the provided vCPU is invalid | ||
| 76 | * or out of range. | ||
| 77 | * * NE_ERR_NOT_IN_INIT_STATE - The enclave is not in init state | ||
| 78 | * (init = before being started). | ||
| 79 | * * NE_ERR_INVALID_VCPU - The provided vCPU is not in the available | ||
| 80 | * CPUs range. | ||
| 81 | * * Error codes from the NE PCI device request. | ||
| 82 | */ | ||
| 83 | #define NE_ADD_VCPU _IOWR(0xAE, 0x21, __u32) | ||
| 84 | |||
| 85 | /** | ||
| 86 | * NE_GET_IMAGE_LOAD_INFO - The command is used to get information needed for | ||
| 87 | * in-memory enclave image loading e.g. offset in | ||
| 88 | * enclave memory to start placing the enclave image. | ||
| 89 | * The image load info is an input / output parameter. | ||
| 90 | * It includes info provided by the caller - flags - | ||
| 91 | * and returns the offset in enclave memory where to | ||
| 92 | * start placing the enclave image. | ||
| 93 | * The ioctl can be invoked on the enclave fd, before | ||
| 94 | * an enclave is started. | ||
| 95 | * | ||
| 96 | * Context: Process context. | ||
| 97 | * Return: | ||
| 98 | * * 0 - Logic succesfully completed. | ||
| 99 | * * -1 - There was a failure in the ioctl logic. | ||
| 100 | * On failure, errno is set to: | ||
| 101 | * * EFAULT - copy_from_user() / copy_to_user() failure. | ||
| 102 | * * NE_ERR_NOT_IN_INIT_STATE - The enclave is not in init state (init = | ||
| 103 | * before being started). | ||
| 104 | * * NE_ERR_INVALID_FLAG_VALUE - The value of the provided flag is invalid. | ||
| 105 | */ | ||
| 106 | #define NE_GET_IMAGE_LOAD_INFO _IOWR(0xAE, 0x22, struct ne_image_load_info) | ||
| 107 | |||
| 108 | /** | ||
| 109 | * NE_SET_USER_MEMORY_REGION - The command is used to set a memory region for an | ||
| 110 | * enclave, given the allocated memory from the | ||
| 111 | * userspace. Enclave memory needs to be from the | ||
| 112 | * same NUMA node as the enclave CPUs. | ||
| 113 | * The user memory region is an input parameter. It | ||
| 114 | * includes info provided by the caller - flags, | ||
| 115 | * memory size and userspace address. | ||
| 116 | * The ioctl can be invoked on the enclave fd, | ||
| 117 | * before an enclave is started. | ||
| 118 | * | ||
| 119 | * Context: Process context. | ||
| 120 | * Return: | ||
| 121 | * * 0 - Logic succesfully completed. | ||
| 122 | * * -1 - There was a failure in the ioctl logic. | ||
| 123 | * On failure, errno is set to: | ||
| 124 | * * EFAULT - copy_from_user() failure. | ||
| 125 | * * EINVAL - Invalid physical memory region(s) e.g. | ||
| 126 | * unaligned address. | ||
| 127 | * * EIO - Current task mm is not the same as | ||
| 128 | * the one that created the enclave. | ||
| 129 | * * ENOMEM - Memory allocation failure for internal | ||
| 130 | * bookkeeping variables. | ||
| 131 | * * NE_ERR_NOT_IN_INIT_STATE - The enclave is not in init state | ||
| 132 | * (init = before being started). | ||
| 133 | * * NE_ERR_INVALID_MEM_REGION_SIZE - The memory size of the region is not | ||
| 134 | * multiple of 2 MiB. | ||
| 135 | * * NE_ERR_INVALID_MEM_REGION_ADDR - Invalid user space address given. | ||
| 136 | * * NE_ERR_UNALIGNED_MEM_REGION_ADDR - Unaligned user space address given. | ||
| 137 | * * NE_ERR_MEM_REGION_ALREADY_USED - The memory region is already used. | ||
| 138 | * * NE_ERR_MEM_NOT_HUGE_PAGE - The memory region is not backed by | ||
| 139 | * huge pages. | ||
| 140 | * * NE_ERR_MEM_DIFFERENT_NUMA_NODE - The memory region is not from the same | ||
| 141 | * NUMA node as the CPUs. | ||
| 142 | * * NE_ERR_MEM_MAX_REGIONS - The number of memory regions set for | ||
| 143 | * the enclave reached maximum. | ||
| 144 | * * NE_ERR_INVALID_PAGE_SIZE - The memory region is not backed by | ||
| 145 | * pages multiple of 2 MiB. | ||
| 146 | * * NE_ERR_INVALID_FLAG_VALUE - The value of the provided flag is invalid. | ||
| 147 | * * Error codes from get_user_pages(). | ||
| 148 | * * Error codes from the NE PCI device request. | ||
| 149 | */ | ||
| 150 | #define NE_SET_USER_MEMORY_REGION _IOW(0xAE, 0x23, struct ne_user_memory_region) | ||
| 151 | |||
| 152 | /** | ||
| 153 | * NE_START_ENCLAVE - The command is used to trigger enclave start after the | ||
| 154 | * enclave resources, such as memory and CPU, have been set. | ||
| 155 | * The enclave start info is an input / output parameter. It | ||
| 156 | * includes info provided by the caller - enclave cid and | ||
| 157 | * flags - and returns the cid (if input cid is 0). | ||
| 158 | * The ioctl can be invoked on the enclave fd, after an | ||
| 159 | * enclave slot is created and resources, such as memory and | ||
| 160 | * vCPUs are set for an enclave. | ||
| 161 | * | ||
| 162 | * Context: Process context. | ||
| 163 | * Return: | ||
| 164 | * * 0 - Logic succesfully completed. | ||
| 165 | * * -1 - There was a failure in the ioctl logic. | ||
| 166 | * On failure, errno is set to: | ||
| 167 | * * EFAULT - copy_from_user() / copy_to_user() failure. | ||
| 168 | * * NE_ERR_NOT_IN_INIT_STATE - The enclave is not in init state | ||
| 169 | * (init = before being started). | ||
| 170 | * * NE_ERR_NO_MEM_REGIONS_ADDED - No memory regions are set. | ||
| 171 | * * NE_ERR_NO_VCPUS_ADDED - No vCPUs are set. | ||
| 172 | * * NE_ERR_FULL_CORES_NOT_USED - Full core(s) not set for the enclave. | ||
| 173 | * * NE_ERR_ENCLAVE_MEM_MIN_SIZE - Enclave memory is less than minimum | ||
| 174 | * memory size (64 MiB). | ||
| 175 | * * NE_ERR_INVALID_FLAG_VALUE - The value of the provided flag is invalid. | ||
| 176 | * * NE_ERR_INVALID_ENCLAVE_CID - The provided enclave CID is invalid. | ||
| 177 | * * Error codes from the NE PCI device request. | ||
| 178 | */ | ||
| 179 | #define NE_START_ENCLAVE _IOWR(0xAE, 0x24, struct ne_enclave_start_info) | ||
| 180 | |||
| 181 | /** | ||
| 182 | * DOC: NE specific error codes | ||
| 183 | */ | ||
| 184 | |||
| 185 | /** | ||
| 186 | * NE_ERR_VCPU_ALREADY_USED - The provided vCPU is already used. | ||
| 187 | */ | ||
| 188 | #define NE_ERR_VCPU_ALREADY_USED (256) | ||
| 189 | /** | ||
| 190 | * NE_ERR_VCPU_NOT_IN_CPU_POOL - The provided vCPU is not available in the | ||
| 191 | * NE CPU pool. | ||
| 192 | */ | ||
| 193 | #define NE_ERR_VCPU_NOT_IN_CPU_POOL (257) | ||
| 194 | /** | ||
| 195 | * NE_ERR_VCPU_INVALID_CPU_CORE - The core id of the provided vCPU is invalid | ||
| 196 | * or out of range of the NE CPU pool. | ||
| 197 | */ | ||
| 198 | #define NE_ERR_VCPU_INVALID_CPU_CORE (258) | ||
| 199 | /** | ||
| 200 | * NE_ERR_INVALID_MEM_REGION_SIZE - The user space memory region size is not | ||
| 201 | * multiple of 2 MiB. | ||
| 202 | */ | ||
| 203 | #define NE_ERR_INVALID_MEM_REGION_SIZE (259) | ||
| 204 | /** | ||
| 205 | * NE_ERR_INVALID_MEM_REGION_ADDR - The user space memory region address range | ||
| 206 | * is invalid. | ||
| 207 | */ | ||
| 208 | #define NE_ERR_INVALID_MEM_REGION_ADDR (260) | ||
| 209 | /** | ||
| 210 | * NE_ERR_UNALIGNED_MEM_REGION_ADDR - The user space memory region address is | ||
| 211 | * not aligned. | ||
| 212 | */ | ||
| 213 | #define NE_ERR_UNALIGNED_MEM_REGION_ADDR (261) | ||
| 214 | /** | ||
| 215 | * NE_ERR_MEM_REGION_ALREADY_USED - The user space memory region is already used. | ||
| 216 | */ | ||
| 217 | #define NE_ERR_MEM_REGION_ALREADY_USED (262) | ||
| 218 | /** | ||
| 219 | * NE_ERR_MEM_NOT_HUGE_PAGE - The user space memory region is not backed by | ||
| 220 | * contiguous physical huge page(s). | ||
| 221 | */ | ||
| 222 | #define NE_ERR_MEM_NOT_HUGE_PAGE (263) | ||
| 223 | /** | ||
| 224 | * NE_ERR_MEM_DIFFERENT_NUMA_NODE - The user space memory region is backed by | ||
| 225 | * pages from different NUMA nodes than the CPUs. | ||
| 226 | */ | ||
| 227 | #define NE_ERR_MEM_DIFFERENT_NUMA_NODE (264) | ||
| 228 | /** | ||
| 229 | * NE_ERR_MEM_MAX_REGIONS - The supported max memory regions per enclaves has | ||
| 230 | * been reached. | ||
| 231 | */ | ||
| 232 | #define NE_ERR_MEM_MAX_REGIONS (265) | ||
| 233 | /** | ||
| 234 | * NE_ERR_NO_MEM_REGIONS_ADDED - The command to start an enclave is triggered | ||
| 235 | * and no memory regions are added. | ||
| 236 | */ | ||
| 237 | #define NE_ERR_NO_MEM_REGIONS_ADDED (266) | ||
| 238 | /** | ||
| 239 | * NE_ERR_NO_VCPUS_ADDED - The command to start an enclave is triggered and no | ||
| 240 | * vCPUs are added. | ||
| 241 | */ | ||
| 242 | #define NE_ERR_NO_VCPUS_ADDED (267) | ||
| 243 | /** | ||
| 244 | * NE_ERR_ENCLAVE_MEM_MIN_SIZE - The enclave memory size is lower than the | ||
| 245 | * minimum supported. | ||
| 246 | */ | ||
| 247 | #define NE_ERR_ENCLAVE_MEM_MIN_SIZE (268) | ||
| 248 | /** | ||
| 249 | * NE_ERR_FULL_CORES_NOT_USED - The command to start an enclave is triggered and | ||
| 250 | * full CPU cores are not set. | ||
| 251 | */ | ||
| 252 | #define NE_ERR_FULL_CORES_NOT_USED (269) | ||
| 253 | /** | ||
| 254 | * NE_ERR_NOT_IN_INIT_STATE - The enclave is not in init state when setting | ||
| 255 | * resources or triggering start. | ||
| 256 | */ | ||
| 257 | #define NE_ERR_NOT_IN_INIT_STATE (270) | ||
| 258 | /** | ||
| 259 | * NE_ERR_INVALID_VCPU - The provided vCPU is out of range of the available CPUs. | ||
| 260 | */ | ||
| 261 | #define NE_ERR_INVALID_VCPU (271) | ||
| 262 | /** | ||
| 263 | * NE_ERR_NO_CPUS_AVAIL_IN_POOL - The command to create an enclave is triggered | ||
| 264 | * and no CPUs are available in the pool. | ||
| 265 | */ | ||
| 266 | #define NE_ERR_NO_CPUS_AVAIL_IN_POOL (272) | ||
| 267 | /** | ||
| 268 | * NE_ERR_INVALID_PAGE_SIZE - The user space memory region is not backed by pages | ||
| 269 | * multiple of 2 MiB. | ||
| 270 | */ | ||
| 271 | #define NE_ERR_INVALID_PAGE_SIZE (273) | ||
| 272 | /** | ||
| 273 | * NE_ERR_INVALID_FLAG_VALUE - The provided flag value is invalid. | ||
| 274 | */ | ||
| 275 | #define NE_ERR_INVALID_FLAG_VALUE (274) | ||
| 276 | /** | ||
| 277 | * NE_ERR_INVALID_ENCLAVE_CID - The provided enclave CID is invalid, either | ||
| 278 | * being a well-known value or the CID of the | ||
| 279 | * parent / primary VM. | ||
| 280 | */ | ||
| 281 | #define NE_ERR_INVALID_ENCLAVE_CID (275) | ||
| 282 | |||
| 283 | /** | ||
| 284 | * DOC: Image load info flags | ||
| 285 | */ | ||
| 286 | |||
| 287 | /** | ||
| 288 | * NE_EIF_IMAGE - Enclave Image Format (EIF) | ||
| 289 | */ | ||
| 290 | #define NE_EIF_IMAGE (0x01) | ||
| 291 | |||
| 292 | #define NE_IMAGE_LOAD_MAX_FLAG_VAL (0x02) | ||
| 293 | |||
| 294 | /** | ||
| 295 | * struct ne_image_load_info - Info necessary for in-memory enclave image | ||
| 296 | * loading (in / out). | ||
| 297 | * @flags: Flags to determine the enclave image type | ||
| 298 | * (e.g. Enclave Image Format - EIF) (in). | ||
| 299 | * @memory_offset: Offset in enclave memory where to start placing the | ||
| 300 | * enclave image (out). | ||
| 301 | */ | ||
| 302 | struct ne_image_load_info { | ||
| 303 | __u64 flags; | ||
| 304 | __u64 memory_offset; | ||
| 305 | }; | ||
| 306 | |||
| 307 | /** | ||
| 308 | * DOC: User memory region flags | ||
| 309 | */ | ||
| 310 | |||
| 311 | /** | ||
| 312 | * NE_DEFAULT_MEMORY_REGION - Memory region for enclave general usage. | ||
| 313 | */ | ||
| 314 | #define NE_DEFAULT_MEMORY_REGION (0x00) | ||
| 315 | |||
| 316 | #define NE_MEMORY_REGION_MAX_FLAG_VAL (0x01) | ||
| 317 | |||
| 318 | /** | ||
| 319 | * struct ne_user_memory_region - Memory region to be set for an enclave (in). | ||
| 320 | * @flags: Flags to determine the usage for the memory region (in). | ||
| 321 | * @memory_size: The size, in bytes, of the memory region to be set for | ||
| 322 | * an enclave (in). | ||
| 323 | * @userspace_addr: The start address of the userspace allocated memory of | ||
| 324 | * the memory region to set for an enclave (in). | ||
| 325 | */ | ||
| 326 | struct ne_user_memory_region { | ||
| 327 | __u64 flags; | ||
| 328 | __u64 memory_size; | ||
| 329 | __u64 userspace_addr; | ||
| 330 | }; | ||
| 331 | |||
| 332 | /** | ||
| 333 | * DOC: Enclave start info flags | ||
| 334 | */ | ||
| 335 | |||
| 336 | /** | ||
| 337 | * NE_ENCLAVE_PRODUCTION_MODE - Start enclave in production mode. | ||
| 338 | */ | ||
| 339 | #define NE_ENCLAVE_PRODUCTION_MODE (0x00) | ||
| 340 | /** | ||
| 341 | * NE_ENCLAVE_DEBUG_MODE - Start enclave in debug mode. | ||
| 342 | */ | ||
| 343 | #define NE_ENCLAVE_DEBUG_MODE (0x01) | ||
| 344 | |||
| 345 | #define NE_ENCLAVE_START_MAX_FLAG_VAL (0x02) | ||
| 346 | |||
| 347 | /** | ||
| 348 | * struct ne_enclave_start_info - Setup info necessary for enclave start (in / out). | ||
| 349 | * @flags: Flags for the enclave to start with (e.g. debug mode) (in). | ||
| 350 | * @enclave_cid: Context ID (CID) for the enclave vsock device. If 0 as | ||
| 351 | * input, the CID is autogenerated by the hypervisor and | ||
| 352 | * returned back as output by the driver (in / out). | ||
| 353 | */ | ||
| 354 | struct ne_enclave_start_info { | ||
| 355 | __u64 flags; | ||
| 356 | __u64 enclave_cid; | ||
| 357 | }; | ||
| 358 | |||
| 359 | #endif /* _UAPI_LINUX_NITRO_ENCLAVES_H_ */ | ||