1 /* SPDX-License-Identifier: GPL-2.0 WITH Linux-syscall-note */
3 * Copyright © 2016 Intel Corporation
6 * Rafael Antognolli <rafael.antognolli@intel.com>
7 * Scott Bauer <scott.bauer@intel.com>
10 #ifndef _UAPI_SED_OPAL_H
11 #define _UAPI_SED_OPAL_H
13 #include <linux/types.h>
15 #define OPAL_KEY_MAX 256
16 #define OPAL_MAX_LRS 9
19 OPAL_MBR_ENABLE = 0x0,
20 OPAL_MBR_DISABLE = 0x01,
23 enum opal_mbr_done_flag {
24 OPAL_MBR_NOT_DONE = 0x0,
41 enum opal_lock_state {
42 OPAL_RO = 0x01, /* 0001 */
43 OPAL_RW = 0x02, /* 0010 */
44 OPAL_LK = 0x04, /* 0100 */
51 __u8 key[OPAL_KEY_MAX];
58 __u8 lr[OPAL_MAX_LRS];
59 __u8 align[2]; /* Align to 8 byte boundary */
62 struct opal_session_info {
65 struct opal_key opal_key;
68 struct opal_user_lr_setup {
71 __u32 RLE; /* Read Lock enabled */
72 __u32 WLE; /* Write Lock Enabled */
73 struct opal_session_info session;
76 struct opal_lock_unlock {
77 struct opal_session_info session;
83 struct opal_session_info session;
85 /* When we're not operating in sum, and we first set
86 * passwords we need to set them via ADMIN authority.
87 * After passwords are changed, we can set them via,
89 * Because of this restriction we need to know about
90 * Two different users. One in 'session' which we will use
91 * to start the session and new_userr_pw as the user we're
94 struct opal_session_info new_user_pw;
97 struct opal_mbr_data {
103 struct opal_mbr_done {
109 struct opal_shadow_mbr {
116 #define IOC_OPAL_SAVE _IOW('p', 220, struct opal_lock_unlock)
117 #define IOC_OPAL_LOCK_UNLOCK _IOW('p', 221, struct opal_lock_unlock)
118 #define IOC_OPAL_TAKE_OWNERSHIP _IOW('p', 222, struct opal_key)
119 #define IOC_OPAL_ACTIVATE_LSP _IOW('p', 223, struct opal_lr_act)
120 #define IOC_OPAL_SET_PW _IOW('p', 224, struct opal_new_pw)
121 #define IOC_OPAL_ACTIVATE_USR _IOW('p', 225, struct opal_session_info)
122 #define IOC_OPAL_REVERT_TPR _IOW('p', 226, struct opal_key)
123 #define IOC_OPAL_LR_SETUP _IOW('p', 227, struct opal_user_lr_setup)
124 #define IOC_OPAL_ADD_USR_TO_LR _IOW('p', 228, struct opal_lock_unlock)
125 #define IOC_OPAL_ENABLE_DISABLE_MBR _IOW('p', 229, struct opal_mbr_data)
126 #define IOC_OPAL_ERASE_LR _IOW('p', 230, struct opal_session_info)
127 #define IOC_OPAL_SECURE_ERASE_LR _IOW('p', 231, struct opal_session_info)
128 #define IOC_OPAL_PSID_REVERT_TPR _IOW('p', 232, struct opal_key)
129 #define IOC_OPAL_MBR_DONE _IOW('p', 233, struct opal_mbr_done)
130 #define IOC_OPAL_WRITE_SHADOW_MBR _IOW('p', 234, struct opal_shadow_mbr)
132 #endif /* _UAPI_SED_OPAL_H */