1 files changed, 45 insertions, 0 deletions

diff --git a/arch/s390/kernel/setup.c b/arch/s390/kernel/setup.c
index 12d136e567c4..ffc87520aca9 100644
--- a/arch/s390/kernel/setup.c
+++ b/arch/s390/kernel/setup.c
@@ -50,6 +50,7 @@
 #include <linux/compat.h>
 #include <linux/start_kernel.h>
 
+#include <asm/boot_data.h>
 #include <asm/ipl.h>
 #include <asm/facility.h>
 #include <asm/smp.h>
@@ -741,6 +742,15 @@ static void __init reserve_initrd(void)
 #endif
 }
 
+/*
+ * Reserve the memory area used to pass the certificate lists
+ */
+static void __init reserve_certificate_list(void)
+{
+        if (ipl_cert_list_addr)
+                memblock_reserve(ipl_cert_list_addr, ipl_cert_list_size);
+}
+
 static void __init reserve_mem_detect_info(void)
 {
         unsigned long start, size;
@@ -1036,6 +1046,38 @@ static void __init setup_control_program_code(void)
 }
 
 /*
+ * Print the component list from the IPL report
+ */
+static void __init log_component_list(void)
+{
+        struct ipl_rb_component_entry *ptr, *end;
+        char *str;
+
+        if (!early_ipl_comp_list_addr)
+                return;
+        if (ipl_block.hdr.flags & IPL_PL_FLAG_IPLSR)
+                pr_info("Linux is running with Secure-IPL enabled\n");
+        else
+                pr_info("Linux is running with Secure-IPL disabled\n");
+        ptr = (void *) early_ipl_comp_list_addr;
+        end = (void *) ptr + early_ipl_comp_list_size;
+        pr_info("The IPL report contains the following components:\n");
+        while (ptr < end) {
+                if (ptr->flags & IPL_RB_COMPONENT_FLAG_SIGNED) {
+                        if (ptr->flags & IPL_RB_COMPONENT_FLAG_VERIFIED)
+                                str = "signed, verified";
+                        else
+                                str = "signed, verification failed";
+                } else {
+                        str = "not signed";
+                }
+                pr_info("%016llx - %016llx (%s)\n",
+                        ptr->addr, ptr->addr + ptr->len, str);
+                ptr++;
+        }
+}
+
+/*
  * Setup function called from init/main.c just after the banner
  * was printed.
  */
@@ -1055,6 +1097,8 @@ void __init setup_arch(char **cmdline_p)
         else
                 pr_info("Linux is running as a guest in 64-bit mode\n");
 
+        log_component_list();
+
         /* Have one command line that is parsed and saved in /proc/cmdline */
         /* boot_command_line has been already set up in early.c */
         *cmdline_p = boot_command_line;
@@ -1086,6 +1130,7 @@ void __init setup_arch(char **cmdline_p)
         reserve_oldmem();
         reserve_kernel();
         reserve_initrd();
+        reserve_certificate_list();
         reserve_mem_detect_info();
         memblock_allow_resize();