policy: operation of svn should be greater-or-equal

Signed-off-by: Jiaqi Gao <[email protected]>
intel · Sep 24, 2024 · 166a10e · 166a10e
1 parent 9295d99
commit 166a10e
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 9 deletions.
diff --git a/config/policy_pre_production_fmspc.json b/config/policy_pre_production_fmspc.json
@@ -1285,7 +1285,7 @@
                         "reference": 2
                     },
                     "ISVSVN": {
-                        "operation": "equal",
+                        "operation": "greater-or-equal",
                         "reference": 0
                     },
                     "MISCSELECT": {
@@ -1315,7 +1315,7 @@
                         "reference": 2
                     },
                     "TDXModuleSVN": {
-                        "operation": "equal",
+                        "operation": "greater-or-equal",
                         "reference": 0
                     }
                 }
@@ -1337,7 +1337,7 @@
                         "reference": 3
                     },
                     "TDXModuleSVN": {
-                        "operation": "equal",
+                        "operation": "greater-or-equal",
                         "reference": 0
                     }
                 }
@@ -1359,7 +1359,7 @@
                         "reference": 1
                     },
                     "TDXModuleSVN": {
-                        "operation": "equal",
+                        "operation": "greater-or-equal",
                         "reference": 0
                     }
                 }

diff --git a/config/policy_production_fmspc.json b/config/policy_production_fmspc.json
@@ -967,7 +967,7 @@
                         "reference": 2
                     },
                     "ISVSVN": {
-                        "operation": "equal",
+                        "operation": "greater-or-equal",
                         "reference": 4
                     },
                     "MISCSELECT": {
@@ -997,7 +997,7 @@
                         "reference": 3
                     },
                     "TDXModuleSVN": {
-                        "operation": "equal",
+                        "operation": "greater-or-equal",
                         "reference": 2
                     }
                 }
@@ -1019,7 +1019,7 @@
                         "reference": 1
                     },
                     "TDXModuleSVN": {
-                        "operation": "equal",
+                        "operation": "greater-or-equal",
                         "reference": 4
                     }
                 }

diff --git a/tools/migtd-policy-generator/src/policy.rs b/tools/migtd-policy-generator/src/policy.rs
@@ -162,7 +162,7 @@ impl QePolicy {
                         reference: Reference::Integer(isvprodid),
                     },
                     isvsvn: Property {
-                        operation: "equal".to_string(),
+                        operation: "greater-or-equal".to_string(),
                         reference: Reference::Integer(isvsvn),
                     },
                 },
@@ -262,7 +262,7 @@ impl TdxModulePolicy {
                                     reference: Reference::Integer(id),
                                 },
                                 tdx_module_svn: Property {
-                                    operation: "equal".to_string(),
+                                    operation: "greater-or-equal".to_string(),
                                     reference: Reference::Integer(
                                         tdx_module.tcb_levels[0].tcb.isvsvn,
                                     ),