projectacrn / acrn-hypervisor

Project ACRN hypervisor
BSD 3-Clause "New" or "Revised" License
1.1k stars 506 forks source link

Mitigate reset attack - set MOR bit #6097

Closed yfliuuu closed 2 years ago

yfliuuu commented 3 years ago

The ACRN efi boot loader (ACRN efi-stub) shall always set MOR bit before ACRN start.

It mitigates the security issue like secret data leakage from previous sudden system shutdown. Link to TCG Mitigation specification https://trustedcomputinggroup.org/wp-content/uploads/Platform-Reset-Attack-Mitigation-Specification.pdf

yfliuuu commented 3 years ago

[External_System_ID] ACRN-7147