Re: IMA fails to see TPM chip (rpi3, linaro optee)

[Markku Savela <msa@xxxxxxxxxxx>]

On 18/02/2019 11:36, Markku Savela wrote:

>   https://www.spinics.net/lists/linux-integrity/msg01018.html
>
> e.g., spi is not intialized early enough
>
> [    4.007959] ima: No TPM chip found, activating TPM-bypass! (rc=-19)
> [    5.240738] tpm_tis_spi spi0.1: 2.0 TPM (device-id 0x1B, rev-id 22)

Oh, and I already have the self test disabled (in above), no effect...


diff --git a/drivers/char/tpm/tpm2-cmd.c b/drivers/char/tpm/tpm2-cmd.c
index 44a3d1623..7e61fc243 100644
--- a/drivers/char/tpm/tpm2-cmd.c
+++ b/drivers/char/tpm/tpm2-cmd.c
@@ -890,7 +890,7 @@ static int tpm2_do_selftest(struct tpm_chip *chip)

        loops = jiffies_to_msecs(duration) / delay_msec;

-       rc = tpm2_start_selftest(chip, true);
+       rc = tpm2_start_selftest(chip, false);
        if (rc)
                return rc;