spi: intel: Add protected and locked attributes
authorAlexander Usyskin <alexander.usyskin@intel.com>
Wed, 9 Oct 2024 06:22:44 +0000 (09:22 +0300)
committerMark Brown <broonie@kernel.org>
Wed, 9 Oct 2024 13:41:00 +0000 (14:41 +0100)
commitb1258105f9ce5203f48a47fd2f2cec8c38c41841
treef61191cb9b60df86f4c0becb9f343367c2b64982
parentc2a59c892f20379a3e48124a83491a12374cd7e0
spi: intel: Add protected and locked attributes

The manufacturing access to the PCH/SoC SPI device is traditionally
performed via userspace driver accessing registers via /dev/mem but due
to security concerns /dev/mem access is being much restricted, hence the
reason for utilizing dedicated Intel PCH/SoC SPI controller driver,
which is already implemented in the Linux kernel.

Intel PCH/SoC SPI controller protects the flash storage via two
mechanisms one is the via region protection registers and second via
BIOS lock. The BIOS locks only the BIOS regions usually 0 and/or 6.

The device always boots with BIOS lock set, but during manufacturing the
BIOS lock has to be lifted in order to enable the write access. This can
be done by passing "writeable=1" in the command line when the driver is
loaded. This "locked" state is exposed through new sysfs attributes
(intel_spi_locked, intel_spi_bios_locked).

Second, also the region protection status is exposed via sysfs attribute
(intel_spi_protected) as the manufacturing will need the both files in
order to validate that the device is properly sealed.

Includes code written by Tamar Mashiah.

Signed-off-by: Alexander Usyskin <alexander.usyskin@intel.com>
Co-developed-by: Tomas Winkler <tomasw@gmail.com>
Signed-off-by: Tomas Winkler <tomasw@gmail.com>
Reviewed-by: Andy Shevchenko <andriy.shevchenko@linux.intel.com>
Signed-off-by: Mika Westerberg <mika.westerberg@linux.intel.com>
Link: https://patch.msgid.link/20241009062244.2436793-1-mika.westerberg@linux.intel.com
Signed-off-by: Mark Brown <broonie@kernel.org>
Documentation/ABI/testing/sysfs-driver-spi-intel [new file with mode: 0644]
drivers/spi/spi-intel-pci.c
drivers/spi/spi-intel-platform.c
drivers/spi/spi-intel.c
drivers/spi/spi-intel.h