From 166a10e8d8925a92e6f72ab08b1869410fb92ec4 Mon Sep 17 00:00:00 2001 From: Jiaqi Gao Date: Tue, 24 Sep 2024 10:34:30 +0800 Subject: [PATCH] policy: operation of `svn` should be `greater-or-equal` Signed-off-by: Jiaqi Gao --- config/policy_pre_production_fmspc.json | 8 ++++---- config/policy_production_fmspc.json | 6 +++--- tools/migtd-policy-generator/src/policy.rs | 4 ++-- 3 files changed, 9 insertions(+), 9 deletions(-) diff --git a/config/policy_pre_production_fmspc.json b/config/policy_pre_production_fmspc.json index 4fe65fb..17d5d48 100644 --- a/config/policy_pre_production_fmspc.json +++ b/config/policy_pre_production_fmspc.json @@ -1285,7 +1285,7 @@ "reference": 2 }, "ISVSVN": { - "operation": "equal", + "operation": "greater-or-equal", "reference": 0 }, "MISCSELECT": { @@ -1315,7 +1315,7 @@ "reference": 2 }, "TDXModuleSVN": { - "operation": "equal", + "operation": "greater-or-equal", "reference": 0 } } @@ -1337,7 +1337,7 @@ "reference": 3 }, "TDXModuleSVN": { - "operation": "equal", + "operation": "greater-or-equal", "reference": 0 } } @@ -1359,7 +1359,7 @@ "reference": 1 }, "TDXModuleSVN": { - "operation": "equal", + "operation": "greater-or-equal", "reference": 0 } } diff --git a/config/policy_production_fmspc.json b/config/policy_production_fmspc.json index 60ce83e..35e800d 100644 --- a/config/policy_production_fmspc.json +++ b/config/policy_production_fmspc.json @@ -967,7 +967,7 @@ "reference": 2 }, "ISVSVN": { - "operation": "equal", + "operation": "greater-or-equal", "reference": 4 }, "MISCSELECT": { @@ -997,7 +997,7 @@ "reference": 3 }, "TDXModuleSVN": { - "operation": "equal", + "operation": "greater-or-equal", "reference": 2 } } @@ -1019,7 +1019,7 @@ "reference": 1 }, "TDXModuleSVN": { - "operation": "equal", + "operation": "greater-or-equal", "reference": 4 } } diff --git a/tools/migtd-policy-generator/src/policy.rs b/tools/migtd-policy-generator/src/policy.rs index c9763ef..d79c0b1 100644 --- a/tools/migtd-policy-generator/src/policy.rs +++ b/tools/migtd-policy-generator/src/policy.rs @@ -162,7 +162,7 @@ impl QePolicy { reference: Reference::Integer(isvprodid), }, isvsvn: Property { - operation: "equal".to_string(), + operation: "greater-or-equal".to_string(), reference: Reference::Integer(isvsvn), }, }, @@ -262,7 +262,7 @@ impl TdxModulePolicy { reference: Reference::Integer(id), }, tdx_module_svn: Property { - operation: "equal".to_string(), + operation: "greater-or-equal".to_string(), reference: Reference::Integer( tdx_module.tcb_levels[0].tcb.isvsvn, ),