1 What: /sys/kernel/config/tsm/report/ 1 What: /sys/kernel/config/tsm/report/$name/inblob
2 Date: September, 2023 2 Date: September, 2023
3 KernelVersion: v6.7 3 KernelVersion: v6.7
4 Contact: linux-coco@lists.linux.dev 4 Contact: linux-coco@lists.linux.dev
5 Description: 5 Description:
6 (WO) Up to 64 bytes of user sp 6 (WO) Up to 64 bytes of user specified binary data. For replay
7 protection this should include 7 protection this should include a nonce, but the kernel does not
8 place any restrictions on the 8 place any restrictions on the content.
9 9
10 What: /sys/kernel/config/tsm/report/ 10 What: /sys/kernel/config/tsm/report/$name/outblob
11 Date: September, 2023 11 Date: September, 2023
12 KernelVersion: v6.7 12 KernelVersion: v6.7
13 Contact: linux-coco@lists.linux.dev 13 Contact: linux-coco@lists.linux.dev
14 Description: 14 Description:
15 (RO) Binary attestation report 15 (RO) Binary attestation report generated from @inblob and other
16 options The format of the repo 16 options The format of the report is implementation specific
17 where the implementation is co 17 where the implementation is conveyed via the @provider
18 attribute. 18 attribute.
19 19
20 What: /sys/kernel/config/tsm/report/ 20 What: /sys/kernel/config/tsm/report/$name/auxblob
21 Date: October, 2023 21 Date: October, 2023
22 KernelVersion: v6.7 22 KernelVersion: v6.7
23 Contact: linux-coco@lists.linux.dev 23 Contact: linux-coco@lists.linux.dev
24 Description: 24 Description:
25 (RO) Optional supplemental dat 25 (RO) Optional supplemental data that a TSM may emit, visibility
26 of this attribute depends on T 26 of this attribute depends on TSM, and may be empty if no
27 auxiliary data is available. 27 auxiliary data is available.
28 28
29 When @provider is "sev_guest" 29 When @provider is "sev_guest" this file contains the
30 "cert_table" from SEV-ES Guest 30 "cert_table" from SEV-ES Guest-Hypervisor Communication Block
31 Standardization v2.03 Section 31 Standardization v2.03 Section 4.1.8.1 MSG_REPORT_REQ.
32 https://www.amd.com/content/da 32 https://www.amd.com/content/dam/amd/en/documents/epyc-technical-docs/specifications/56421.pdf
33 33
34 What: /sys/kernel/config/tsm/report/ 34 What: /sys/kernel/config/tsm/report/$name/manifestblob
35 Date: January, 2024 35 Date: January, 2024
36 KernelVersion: v6.10 36 KernelVersion: v6.10
37 Contact: linux-coco@lists.linux.dev 37 Contact: linux-coco@lists.linux.dev
38 Description: 38 Description:
39 (RO) Optional supplemental dat 39 (RO) Optional supplemental data that a TSM may emit, visibility
40 of this attribute depends on T 40 of this attribute depends on TSM, and may be empty if no
41 manifest data is available. 41 manifest data is available.
42 42
43 See 'service_provider' for inf 43 See 'service_provider' for information on the format of the
44 manifest blob. 44 manifest blob.
45 45
46 What: /sys/kernel/config/tsm/report/ 46 What: /sys/kernel/config/tsm/report/$name/provider
47 Date: September, 2023 47 Date: September, 2023
48 KernelVersion: v6.7 48 KernelVersion: v6.7
49 Contact: linux-coco@lists.linux.dev 49 Contact: linux-coco@lists.linux.dev
50 Description: 50 Description:
51 (RO) A name for the format-spe 51 (RO) A name for the format-specification of @outblob like
52 "sev_guest" [1] or "tdx_guest" 52 "sev_guest" [1] or "tdx_guest" [2] in the near term, or a
53 common standard format in the 53 common standard format in the future.
54 54
55 [1]: SEV Secure Nested Paging 55 [1]: SEV Secure Nested Paging Firmware ABI Specification
56 Revision 1.55 Table 22 56 Revision 1.55 Table 22
57 https://www.amd.com/content/da 57 https://www.amd.com/content/dam/amd/en/documents/epyc-technical-docs/specifications/56860.pdf
58 58
59 [2]: Intel® Trust Domain Exte 59 [2]: Intel® Trust Domain Extensions Data Center Attestation
60 Primitives : Quote Generation 60 Primitives : Quote Generation Library and Quote Verification
61 Library Revision 0.8 Appendix 61 Library Revision 0.8 Appendix 4,5
62 https://download.01.org/intel- 62 https://download.01.org/intel-sgx/latest/dcap-latest/linux/docs/Intel_TDX_DCAP_Quoting_Library_API.pdf
63 63
64 What: /sys/kernel/config/tsm/report/ 64 What: /sys/kernel/config/tsm/report/$name/generation
65 Date: September, 2023 65 Date: September, 2023
66 KernelVersion: v6.7 66 KernelVersion: v6.7
67 Contact: linux-coco@lists.linux.dev 67 Contact: linux-coco@lists.linux.dev
68 Description: 68 Description:
69 (RO) The value in this attribu 69 (RO) The value in this attribute increments each time @inblob or
70 any option is written. Userspa 70 any option is written. Userspace can detect conflicts by
71 checking generation before wri 71 checking generation before writing to any attribute and making
72 sure the number of writes matc 72 sure the number of writes matches expectations after reading
73 @outblob, or it can prevent co 73 @outblob, or it can prevent conflicts by creating a report
74 instance per requesting contex 74 instance per requesting context.
75 75
76 What: /sys/kernel/config/tsm/report/ 76 What: /sys/kernel/config/tsm/report/$name/privlevel
77 Date: September, 2023 77 Date: September, 2023
78 KernelVersion: v6.7 78 KernelVersion: v6.7
79 Contact: linux-coco@lists.linux.dev 79 Contact: linux-coco@lists.linux.dev
80 Description: 80 Description:
81 (WO) Attribute is visible if a 81 (WO) Attribute is visible if a TSM implementation provider
82 supports the concept of attest 82 supports the concept of attestation reports for TVMs running at
83 different privilege levels, li 83 different privilege levels, like SEV-SNP "VMPL", specify the
84 privilege level via this attri 84 privilege level via this attribute. The minimum acceptable
85 value is conveyed via @privlev 85 value is conveyed via @privlevel_floor and the maximum
86 acceptable value is TSM_PRIVLE 86 acceptable value is TSM_PRIVLEVEL_MAX (3).
87 87
88 What: /sys/kernel/config/tsm/report/ 88 What: /sys/kernel/config/tsm/report/$name/privlevel_floor
89 Date: September, 2023 89 Date: September, 2023
90 KernelVersion: v6.7 90 KernelVersion: v6.7
91 Contact: linux-coco@lists.linux.dev 91 Contact: linux-coco@lists.linux.dev
92 Description: 92 Description:
93 (RO) Indicates the minimum per 93 (RO) Indicates the minimum permissible value that can be written
94 to @privlevel. 94 to @privlevel.
95 95
96 What: /sys/kernel/config/tsm/report/ 96 What: /sys/kernel/config/tsm/report/$name/service_provider
97 Date: January, 2024 97 Date: January, 2024
98 KernelVersion: v6.10 98 KernelVersion: v6.10
99 Contact: linux-coco@lists.linux.dev 99 Contact: linux-coco@lists.linux.dev
100 Description: 100 Description:
101 (WO) Attribute is visible if a 101 (WO) Attribute is visible if a TSM implementation provider
102 supports the concept of attest 102 supports the concept of attestation reports from a service
103 provider for TVMs, like SEV-SN 103 provider for TVMs, like SEV-SNP running under an SVSM.
104 Specifying the service provide 104 Specifying the service provider via this attribute will create
105 an attestation report as speci 105 an attestation report as specified by the service provider.
106 The only currently supported s 106 The only currently supported service provider is "svsm".
107 107
108 For the "svsm" service provide 108 For the "svsm" service provider, see the Secure VM Service Module
109 for SEV-SNP Guests v1.00 Secti 109 for SEV-SNP Guests v1.00 Section 7. For the doc, search for
110 "site:amd.com "Secure VM Servi 110 "site:amd.com "Secure VM Service Module for SEV-SNP
111 Guests", docID: 58019" 111 Guests", docID: 58019"
112 112
113 What: /sys/kernel/config/tsm/report/ 113 What: /sys/kernel/config/tsm/report/$name/service_guid
114 Date: January, 2024 114 Date: January, 2024
115 KernelVersion: v6.10 115 KernelVersion: v6.10
116 Contact: linux-coco@lists.linux.dev 116 Contact: linux-coco@lists.linux.dev
117 Description: 117 Description:
118 (WO) Attribute is visible if a 118 (WO) Attribute is visible if a TSM implementation provider
119 supports the concept of attest 119 supports the concept of attestation reports from a service
120 provider for TVMs, like SEV-SN 120 provider for TVMs, like SEV-SNP running under an SVSM.
121 Specifying an empty/null GUID 121 Specifying an empty/null GUID (00000000-0000-0000-0000-000000)
122 requests all active services w 122 requests all active services within the service provider be
123 part of the attestation report 123 part of the attestation report. Specifying a GUID request
124 an attestation report of just 124 an attestation report of just the specified service using the
125 manifest form specified by the 125 manifest form specified by the service_manifest_version
126 attribute. 126 attribute.
127 127
128 See 'service_provider' for inf 128 See 'service_provider' for information on the format of the
129 service guid. 129 service guid.
130 130
131 What: /sys/kernel/config/tsm/report/ 131 What: /sys/kernel/config/tsm/report/$name/service_manifest_version
132 Date: January, 2024 132 Date: January, 2024
133 KernelVersion: v6.10 133 KernelVersion: v6.10
134 Contact: linux-coco@lists.linux.dev 134 Contact: linux-coco@lists.linux.dev
135 Description: 135 Description:
136 (WO) Attribute is visible if a 136 (WO) Attribute is visible if a TSM implementation provider
137 supports the concept of attest 137 supports the concept of attestation reports from a service
138 provider for TVMs, like SEV-SN 138 provider for TVMs, like SEV-SNP running under an SVSM.
139 Indicates the service manifest 139 Indicates the service manifest version requested for the
140 attestation report (default 0) 140 attestation report (default 0). If this field is not set by
141 the user, the default manifest 141 the user, the default manifest version of the service (the
142 service's initial/first manife 142 service's initial/first manifest version) is returned.
143 143
144 See 'service_provider' for inf 144 See 'service_provider' for information on the format of the
145 service manifest version. 145 service manifest version.
Linux® is a registered trademark of Linus Torvalds in the United States and other countries.
TOMOYO® is a registered trademark of NTT DATA CORPORATION.