Re: chipsec integrity check
Healer64 <[email protected]> Fri, 01 Dec 2017 14:32:52 -0500
| Newsgroups | dev.linux.lists.oe-chipsec |
|---|---|
| Message-ID | <LmNSBwrulsyeqM_NduX5YaqNxORrJwYyqlSENBczt5C-h38k5GJ875sS5nqSKH9b1Lk0Wei0dltgfY_GhmIQA1rJ_hHiGDgP6b1iyGCg9Co=@protonmail.com> |
--===============3215885987047884650== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Of course. I did my own analysis which may save you some effort. Of the efi variables which had changed from the baseline, very few addition= al changes were seen after a reboot into my normal OS then a reboot into th= e chipsec usb. Only the ErrOutDev and SctCsmMemoryMapVariable changed and = SctCsmMemoryMapVariable is a new variable not part of the baseline. Here is a list of other changes that occurred with just the reboots mention= ed above: ec dump =3D changed iommu config GFXVTD =3D BAR value changed, flags changed back to baseline iommu config VTD =3D BAR value changed, some flags changed back to baseline= but not all iommu status GFXVTD =3D returned to baseline iommu status VTD =3D changed mmio dump DMIBAR =3D changed mmio dump GFXVTBAR =3D returned to baseline except mmio register range mmio dump GMADR =3D changed mmio dump GTTMADR =3D changed mmio dump HDABAR =3D changed mmio dump HDBAR =3D no change mmio dump MCHBAR =3D changed mmio dump PXPEPBAR =3D changed mmio dump VTBAR =3D changed mmio list =3D changed pci dump =3D changed Also when doing the iommu dump config GFXVTD I do get errors from chipsec. = I couldn't capture them. They don't show up in the log and even redirectin= g standard out and standard error doesn't catch them, but I was able to cop= y one from the screen. ioremap error for 0xde0c1000-0xdec2000, requested 0x10, got 0x0 Also it occured to me I should mention this is an AMD system and chipsec co= mplains about an unsupported platform. Most of the functions appear to wor= k just fine even so, but it is possible it could have some affect on the re= sults. Sent with [ProtonMail](https://protonmail.com) Secure Email. > -------- Original Message -------- > Subject: RE: [chipsec] chipsec integrity check > Local Time: December 1, 2017 12:27 AM > UTC Time: December 1, 2017 12:27 AM > From: erik.c.bjorge(a)intel.com > To: Healer64 <[email protected]> > chipsec(a)lists.01.org <[email protected]> > > Thanks for sending the new logs. Give us a day or so to look them over a= nd see if we can find anything new. > > Thanks, > > -Erik > > []From: chipsec [mailto:chipsec-bounces(a)lists.01.org] On Behalf Of Heal= er64 > Sent: Thursday, November 30, 2017 4:23 PM > To: Bjorge, Erik C <[email protected]> > Cc: chipsec(a)lists.01.org > Subject: Re: [chipsec] chipsec integrity check > > After a reboot, I ran the tests again. New log is here: > > https://pastebin.com/XCHrYYJF > > https://pastebin.com/NiYcnxGG > > Just for kicks I did a diff of the 2 instances. > > https://pastebin.com/KLea3gVf > > Some of the BAR values have changed again. No longer 0. That seems odd. > >> >> >> Sent with [ProtonMail](https://protonmail.com) Secure Email. --===============3215885987047884650== Content-Type: text/html MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="attachment.html" PGRpdj5PZiBjb3Vyc2UuJm5ic3A7IEkgZGlkIG15IG93biBhbmFseXNpcyB3aGljaCBtYXkgc2F2 ZSB5b3Ugc29tZSBlZmZvcnQuPGJyPjwvZGl2PjxkaXY+PGJyPjwvZGl2PjxkaXY+T2YgdGhlIGVm aSB2YXJpYWJsZXMgd2hpY2ggaGFkIGNoYW5nZWQgZnJvbSB0aGUgYmFzZWxpbmUsIHZlcnkgZmV3 IGFkZGl0aW9uYWwgY2hhbmdlcyB3ZXJlIHNlZW4gYWZ0ZXIgYSByZWJvb3QgaW50byBteSBub3Jt YWwgT1MgdGhlbiBhIHJlYm9vdCBpbnRvIHRoZSBjaGlwc2VjIHVzYi4mbmJzcDsgT25seSB0aGUg RXJyT3V0RGV2IGFuZCBTY3RDc21NZW1vcnlNYXBWYXJpYWJsZSBjaGFuZ2VkIGFuZCBTY3RDc21N ZW1vcnlNYXBWYXJpYWJsZSBpcyBhIG5ldyB2YXJpYWJsZSBub3QgcGFydCBvZiB0aGUgYmFzZWxp bmUuPGJyPjwvZGl2PjxkaXY+PGJyPjwvZGl2PjxkaXY+SGVyZSBpcyBhIGxpc3Qgb2Ygb3RoZXIg Y2hhbmdlcyB0aGF0IG9jY3VycmVkIHdpdGgganVzdCB0aGUgcmVib290cyBtZW50aW9uZWQgYWJv dmU6PGJyPjwvZGl2PjxkaXY+ZWMgZHVtcCA9IGNoYW5nZWQ8YnI+PC9kaXY+PGRpdj5pb21tdSBj b25maWcgR0ZYVlREID0gQkFSIHZhbHVlIGNoYW5nZWQsIGZsYWdzIGNoYW5nZWQgYmFjayB0byBi YXNlbGluZTxicj48L2Rpdj48ZGl2PmlvbW11IGNvbmZpZyBWVEQgPSBCQVIgdmFsdWUgY2hhbmdl ZCwgc29tZSBmbGFncyBjaGFuZ2VkIGJhY2sgdG8gYmFzZWxpbmUgYnV0IG5vdCBhbGw8YnI+PC9k aXY+PGRpdj5pb21tdSBzdGF0dXMgR0ZYVlREID0gcmV0dXJuZWQgdG8gYmFzZWxpbmU8YnI+PC9k aXY+PGRpdj5pb21tdSBzdGF0dXMgVlREID0gY2hhbmdlZDxicj48L2Rpdj48ZGl2Pm1taW8gZHVt cCBETUlCQVIgPSBjaGFuZ2VkPGJyPjwvZGl2PjxkaXY+bW1pbyBkdW1wIEdGWFZUQkFSID0gcmV0 dXJuZWQgdG8gYmFzZWxpbmUgZXhjZXB0IG1taW8gcmVnaXN0ZXIgcmFuZ2U8YnI+PC9kaXY+PGRp dj5tbWlvIGR1bXAgR01BRFIgPSBjaGFuZ2VkPGJyPjwvZGl2PjxkaXY+bW1pbyBkdW1wIEdUVE1B RFIgPSBjaGFuZ2VkPGJyPjwvZGl2PjxkaXY+bW1pbyBkdW1wIEhEQUJBUiA9IGNoYW5nZWQ8YnI+ PC9kaXY+PGRpdj5tbWlvIGR1bXAgSERCQVIgPSBubyBjaGFuZ2U8YnI+PC9kaXY+PGRpdj5tbWlv IGR1bXAgTUNIQkFSID0gY2hhbmdlZDxicj48L2Rpdj48ZGl2Pm1taW8gZHVtcCBQWFBFUEJBUiA9 IGNoYW5nZWQ8YnI+PC9kaXY+PGRpdj5tbWlvIGR1bXAgVlRCQVIgPSBjaGFuZ2VkPGJyPjwvZGl2 PjxkaXY+bW1pbyBsaXN0ID0gY2hhbmdlZDxicj48L2Rpdj48ZGl2PnBjaSBkdW1wID0gY2hhbmdl ZDxicj48L2Rpdj48ZGl2Pjxicj48L2Rpdj48ZGl2PkFsc28gd2hlbiBkb2luZyB0aGUgaW9tbXUg ZHVtcCBjb25maWcgR0ZYVlREIEkgZG8gZ2V0IGVycm9ycyBmcm9tIGNoaXBzZWMuIEkgY291bGRu J3QgY2FwdHVyZSB0aGVtLiZuYnNwOyBUaGV5IGRvbid0IHNob3cgdXAgaW4gdGhlIGxvZyBhbmQg ZXZlbiByZWRpcmVjdGluZyBzdGFuZGFyZCBvdXQgYW5kIHN0YW5kYXJkIGVycm9yIGRvZXNuJ3Qg Y2F0Y2ggdGhlbSwgYnV0IEkgd2FzIGFibGUgdG8gY29weSBvbmUgZnJvbSB0aGUgc2NyZWVuLjxi cj48L2Rpdj48ZGl2PmlvcmVtYXAgZXJyb3IgZm9yIDB4ZGUwYzEwMDAtMHhkZWMyMDAwLCByZXF1 ZXN0ZWQgMHgxMCwgZ290IDB4MDxicj48L2Rpdj48ZGl2Pjxicj48L2Rpdj48ZGl2PkFsc28gaXQg b2NjdXJlZCB0byBtZSBJIHNob3VsZCBtZW50aW9uIHRoaXMgaXMgYW4gQU1EIHN5c3RlbSBhbmQg Y2hpcHNlYyBjb21wbGFpbnMgYWJvdXQgYW4gdW5zdXBwb3J0ZWQgcGxhdGZvcm0uJm5ic3A7IE1v c3Qgb2YgdGhlIGZ1bmN0aW9ucyBhcHBlYXIgdG8gd29yayBqdXN0IGZpbmUgZXZlbiBzbywgYnV0 IGl0IGlzIHBvc3NpYmxlIGl0IGNvdWxkIGhhdmUgc29tZSBhZmZlY3Qgb24gdGhlIHJlc3VsdHMu PGJyPjwvZGl2PjxkaXY+PGJyPjwvZGl2PjxkaXY+PGJyPjwvZGl2PjxkaXY+PGJyPjwvZGl2Pjxk aXYgY2xhc3M9InByb3Rvbm1haWxfc2lnbmF0dXJlX2Jsb2NrIj48ZGl2IGNsYXNzPSJwcm90b25t YWlsX3NpZ25hdHVyZV9ibG9jay11c2VyIHByb3Rvbm1haWxfc2lnbmF0dXJlX2Jsb2NrLWVtcHR5 Ij48YnI+PC9kaXY+PGRpdiBjbGFzcz0icHJvdG9ubWFpbF9zaWduYXR1cmVfYmxvY2stcHJvdG9u Ij5TZW50IHdpdGggPGEgaHJlZj0iaHR0cHM6Ly9wcm90b25tYWlsLmNvbSI+UHJvdG9uTWFpbDwv YT4gU2VjdXJlIEVtYWlsLjxicj48L2Rpdj48L2Rpdj48ZGl2Pjxicj48L2Rpdj48YmxvY2txdW90 ZSBjbGFzcz0icHJvdG9ubWFpbF9xdW90ZSIgdHlwZT0iY2l0ZSI+PGRpdj4tLS0tLS0tLSBPcmln aW5hbCBNZXNzYWdlIC0tLS0tLS0tPGJyPjwvZGl2PjxkaXY+U3ViamVjdDogUkU6IFtjaGlwc2Vj XSBjaGlwc2VjIGludGVncml0eSBjaGVjazxicj48L2Rpdj48ZGl2PkxvY2FsIFRpbWU6IERlY2Vt YmVyIDEsIDIwMTcgMTI6MjcgQU08YnI+PC9kaXY+PGRpdj5VVEMgVGltZTogRGVjZW1iZXIgMSwg MjAxNyAxMjoyNyBBTTxicj48L2Rpdj48ZGl2PkZyb206IGVyaWsuYy5iam9yZ2VAaW50ZWwuY29t PGJyPjwvZGl2PjxkaXY+VG86IEhlYWxlcjY0ICZsdDtIZWFsZXI2NEBwcm90b25tYWlsLmNvbSZn dDs8YnI+PC9kaXY+PGRpdj5jaGlwc2VjQGxpc3RzLjAxLm9yZyAmbHQ7Y2hpcHNlY0BsaXN0cy4w MS5vcmcmZ3Q7PGJyPjwvZGl2PjxkaXY+PGJyPjwvZGl2PjxkaXY+IDxicj48L2Rpdj48ZGl2IGNs YXNzPSJXb3JkU2VjdGlvbjEiPjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGNsYXNzPSJjb2xv dXIiIHN0eWxlPSJjb2xvcjpyZ2IoMzEsIDczLCAxMjUpIj48c3BhbiBjbGFzcz0iZm9udCIgc3R5 bGU9ImZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+PHNwYW4gY2xh c3M9InNpemUiIHN0eWxlPSJmb250LXNpemU6MTFwdCI+VGhhbmtzIGZvciBzZW5kaW5nIHRoZSBu ZXcgbG9ncy4mbmJzcDsgR2l2ZSB1cyBhIGRheSBvciBzbyB0byBsb29rIHRoZW0gb3ZlciBhbmQg c2VlIGlmIHdlIGNhbiBmaW5kIGFueXRoaW5nIG5ldy48L3NwYW4+PC9zcGFuPjwvc3Bhbj48YnI+ PC9wPjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGNsYXNzPSJjb2xvdXIiIHN0eWxlPSJjb2xv cjpyZ2IoMzEsIDczLCAxMjUpIj48c3BhbiBjbGFzcz0iZm9udCIgc3R5bGU9ImZvbnQtZmFtaWx5 OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+PHNwYW4gY2xhc3M9InNpemUiIHN0eWxl PSJmb250LXNpemU6MTFwdCI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48L3NwYW4+PGJyPjwvcD48cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBjbGFzcz0iY29sb3VyIiBzdHlsZT0iY29sb3I6cmdiKDMx LCA3MywgMTI1KSI+PHNwYW4gY2xhc3M9ImZvbnQiIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtD YWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPjxzcGFuIGNsYXNzPSJzaXplIiBzdHlsZT0iZm9udC1z aXplOjExcHQiPlRoYW5rcyw8L3NwYW4+PC9zcGFuPjwvc3Bhbj48YnI+PC9wPjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIGNsYXNzPSJjb2xvdXIiIHN0eWxlPSJjb2xvcjpyZ2IoMzEsIDczLCAx MjUpIj48c3BhbiBjbGFzcz0iZm9udCIgc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssc2Fucy1zZXJpZiI+PHNwYW4gY2xhc3M9InNpemUiIHN0eWxlPSJmb250LXNpemU6MTFw dCI+LUVyaWs8L3NwYW4+PC9zcGFuPjwvc3Bhbj48YnI+PC9wPjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIGNsYXNzPSJjb2xvdXIiIHN0eWxlPSJjb2xvcjpyZ2IoMzEsIDczLCAxMjUpIj48c3Bh biBjbGFzcz0iZm9udCIgc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fu cy1zZXJpZiI+PHNwYW4gY2xhc3M9InNpemUiIHN0eWxlPSJmb250LXNpemU6MTFwdCI+Jm5ic3A7 PC9zcGFuPjwvc3Bhbj48L3NwYW4+PGJyPjwvcD48ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3Jk ZXItbGVmdDpzb2xpZCBibHVlIDEuNXB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNC4wcHQiPjxkaXY+ PGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjRTFFMUUxIDEuMHB0O3Bh ZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxhIG5hbWU9Il9f X19fcmVwbHlzZXBhcmF0b3IiPjwvYT48Yj48c3BhbiBjbGFzcz0iZm9udCIgc3R5bGU9ImZvbnQt ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+PHNwYW4gY2xhc3M9InNpemUi IHN0eWxlPSJmb250LXNpemU6MTFwdCI+RnJvbTo8L3NwYW4+PC9zcGFuPjwvYj48c3BhbiBjbGFz cz0iZm9udCIgc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJp ZiI+PHNwYW4gY2xhc3M9InNpemUiIHN0eWxlPSJmb250LXNpemU6MTFwdCI+IGNoaXBzZWMgW21h aWx0bzpjaGlwc2VjLWJvdW5jZXNAbGlzdHMuMDEub3JnXSA8Yj5PbiBCZWhhbGYgT2YgPC9iPkhl YWxlcjY0PGJyPiA8Yj5TZW50OjwvYj4gVGh1cnNkYXksIE5vdmVtYmVyIDMwLCAyMDE3IDQ6MjMg UE08YnI+IDxiPlRvOjwvYj4gQmpvcmdlLCBFcmlrIEMgJmx0O2VyaWsuYy5iam9yZ2VAaW50ZWwu Y29tJmd0Ozxicj4gPGI+Q2M6PC9iPiBjaGlwc2VjQGxpc3RzLjAxLm9yZzxicj4gPGI+U3ViamVj dDo8L2I+IFJlOiBbY2hpcHNlY10gY2hpcHNlYyBpbnRlZ3JpdHkgY2hlY2s8L3NwYW4+PC9zcGFu PjwvcD48L2Rpdj48L2Rpdj48cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8YnI+PC9wPjxkaXY+ PHAgY2xhc3M9Ik1zb05vcm1hbCI+QWZ0ZXIgYSByZWJvb3QsIEkgcmFuIHRoZSB0ZXN0cyBhZ2Fp bi4mbmJzcDsgTmV3IGxvZyBpcyBoZXJlOjxicj48L3A+PC9kaXY+PGRpdj48cCBjbGFzcz0iTXNv Tm9ybWFsIj48YSBocmVmPSJodHRwczovL3Bhc3RlYmluLmNvbS9YQ0hyWVlKRiI+aHR0cHM6Ly9w YXN0ZWJpbi5jb20vWENIcllZSkY8L2E+PGJyPjwvcD48L2Rpdj48ZGl2PjxwIGNsYXNzPSJNc29O b3JtYWwiPjxhIGhyZWY9Imh0dHBzOi8vcGFzdGViaW4uY29tL05pWWNueEdHIj5odHRwczovL3Bh c3RlYmluLmNvbS9OaVljbnhHRzwvYT48YnI+PC9wPjwvZGl2PjxkaXY+PHAgY2xhc3M9Ik1zb05v cm1hbCI+Jm5ic3A7PGJyPjwvcD48L2Rpdj48ZGl2PjxwIGNsYXNzPSJNc29Ob3JtYWwiPkp1c3Qg Zm9yIGtpY2tzIEkgZGlkIGEgZGlmZiBvZiB0aGUgMiBpbnN0YW5jZXMuPGJyPjwvcD48L2Rpdj48 ZGl2PjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxicj48L3A+PC9kaXY+PGRpdj48cCBjbGFz cz0iTXNvTm9ybWFsIj48YSBocmVmPSJodHRwczovL3Bhc3RlYmluLmNvbS9LTGVhM2dWZiI+aHR0 cHM6Ly9wYXN0ZWJpbi5jb20vS0xlYTNnVmY8L2E+PGJyPjwvcD48L2Rpdj48ZGl2PjxwIGNsYXNz PSJNc29Ob3JtYWwiPiZuYnNwOzxicj48L3A+PC9kaXY+PGRpdj48cCBjbGFzcz0iTXNvTm9ybWFs Ij4mbmJzcDs8YnI+PC9wPjwvZGl2PjxkaXY+PGRpdj48cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJz cDs8YnI+PC9wPjwvZGl2PjxkaXY+PHAgY2xhc3M9Ik1zb05vcm1hbCI+U29tZSBvZiB0aGUgQkFS IHZhbHVlcyBoYXZlIGNoYW5nZWQgYWdhaW4uJm5ic3A7IE5vIGxvbmdlciAwLiZuYnNwOyBUaGF0 IHNlZW1zIG9kZC48YnI+PC9wPjwvZGl2PjwvZGl2PjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4t dG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPjxkaXY+PGRpdj48ZGl2PjxwIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byIgY2xhc3M9 Ik1zb05vcm1hbCI+Jm5ic3A7PGJyPjwvcD48L2Rpdj48ZGl2PjxwIHN0eWxlPSJtc28tbWFyZ2lu LXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byIgY2xhc3M9Ik1zb05vcm1h bCI+U2VudCB3aXRoIDxhIGhyZWY9Imh0dHBzOi8vcHJvdG9ubWFpbC5jb20iPlByb3Rvbk1haWw8 L2E+IFNlY3VyZSBFbWFpbC48YnI+PC9wPjwvZGl2PjwvZGl2PjxkaXY+PHAgc3R5bGU9Im1zby1t YXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIiBjbGFzcz0iTXNv Tm9ybWFsIj4mbmJzcDs8YnI+PC9wPjwvZGl2PjwvZGl2PjwvYmxvY2txdW90ZT48ZGl2PjxwIGNs YXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxicj48L3A+PC9kaXY+PC9kaXY+PC9kaXY+PC9ibG9ja3F1 b3RlPjxkaXY+PGJyPjwvZGl2Pg== --===============3215885987047884650==--