![Dave Jiang](/assets/img/avatar_default.png)
Add support to unlock the dimm via the kernel key management APIs. The passphrase is expected to be pulled from userspace through keyutils. The key management and sysfs attributes are libnvdimm generic. Encrypted keys are used to protect the nvdimm passphrase at rest. The master key can be a trusted-key sealed in a TPM, preferred, or an encrypted-key, more flexible, but more exposure to a potential attacker. Signed-off-by: Dave Jiang <dave.jiang@intel.com> Co-developed-by: Dan Williams <dan.j.williams@intel.com> Reported-by: Randy Dunlap <rdunlap@infradead.org> Signed-off-by: Dan Williams <dan.j.williams@intel.com>
31 lines
779 B
Makefile
31 lines
779 B
Makefile
# SPDX-License-Identifier: GPL-2.0
|
|
obj-$(CONFIG_LIBNVDIMM) += libnvdimm.o
|
|
obj-$(CONFIG_BLK_DEV_PMEM) += nd_pmem.o
|
|
obj-$(CONFIG_ND_BTT) += nd_btt.o
|
|
obj-$(CONFIG_ND_BLK) += nd_blk.o
|
|
obj-$(CONFIG_X86_PMEM_LEGACY) += nd_e820.o
|
|
obj-$(CONFIG_OF_PMEM) += of_pmem.o
|
|
|
|
nd_pmem-y := pmem.o
|
|
|
|
nd_btt-y := btt.o
|
|
|
|
nd_blk-y := blk.o
|
|
|
|
nd_e820-y := e820.o
|
|
|
|
libnvdimm-y := core.o
|
|
libnvdimm-y += bus.o
|
|
libnvdimm-y += dimm_devs.o
|
|
libnvdimm-y += dimm.o
|
|
libnvdimm-y += region_devs.o
|
|
libnvdimm-y += region.o
|
|
libnvdimm-y += namespace_devs.o
|
|
libnvdimm-y += label.o
|
|
libnvdimm-y += badrange.o
|
|
libnvdimm-$(CONFIG_ND_CLAIM) += claim.o
|
|
libnvdimm-$(CONFIG_BTT) += btt_devs.o
|
|
libnvdimm-$(CONFIG_NVDIMM_PFN) += pfn_devs.o
|
|
libnvdimm-$(CONFIG_NVDIMM_DAX) += dax_devs.o
|
|
libnvdimm-$(CONFIG_NVDIMM_KEYS) += security.o
|