Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 6d7101aa authored by Harald Freudenberger's avatar Harald Freudenberger Committed by Greg Kroah-Hartman
Browse files

s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR 



[ Upstream commit 6733775a92eacd612ac88afa0fd922e4ffeb2bc7 ]

This patch introduces support for a new architectured reply
code 0x8B indicating that a hypervisor layer (if any) has
rejected an ap message.

Linux may run as a guest on top of a hypervisor like zVM
or KVM. So the crypto hardware seen by the ap bus may be
restricted by the hypervisor for example only a subset like
only clear key crypto requests may be supported. Other
requests will be filtered out - rejected by the hypervisor.
The new reply code 0x8B will appear in such cases and needs
to get recognized by the ap bus and zcrypt device driver zoo.

Signed-off-by: default avatarHarald Freudenberger <freude@linux.ibm.com>
Signed-off-by: default avatarVasily Gorbik <gor@linux.ibm.com>
Signed-off-by: default avatarSasha Levin <sashal@kernel.org>
parent 9edc3a3d

drivers/s390/crypto/zcrypt_error.h

+2 −0
Original line number Diff line number Diff line
@@ -75,6 +75,7 @@ struct error_hdr { 
#define REP82_ERROR_EVEN_MOD_IN_OPND	    0x85

#define REP82_ERROR_RESERVED_FIELD	    0x88

#define REP82_ERROR_INVALID_DOMAIN_PENDING  0x8A

#define REP82_ERROR_FILTERED_BY_HYPERVISOR  0x8B

#define REP82_ERROR_TRANSPORT_FAIL	    0x90

#define REP82_ERROR_PACKET_TRUNCATED	    0xA0

#define REP82_ERROR_ZERO_BUFFER_LEN	    0xB0
@@ -105,6 +106,7 @@ static inline int convert_error(struct zcrypt_queue *zq, 
	case REP82_ERROR_INVALID_DOMAIN_PRECHECK:

	case REP82_ERROR_INVALID_DOMAIN_PENDING:

	case REP82_ERROR_INVALID_SPECIAL_CMD:

	case REP82_ERROR_FILTERED_BY_HYPERVISOR:

	//   REP88_ERROR_INVALID_KEY		// '82' CEX2A

	//   REP88_ERROR_OPERAND		// '84' CEX2A

	//   REP88_ERROR_OPERAND_EVEN_MOD	// '85' CEX2A