| 241 | } |
| 242 | |
| 243 | fn extend_rtmr_via_sysfs(index: u32, digest: &[u8; 48]) -> Result<()> { |
| 244 | let path = format!("{}/rtmr{}:sha384", RTMR_SYSFS_BASE, index); |
| 245 | |
| 246 | let mut file = OpenOptions::new() |
| 247 | .write(true) |
| 248 | .open(&path) |
| 249 | .map_err(|e| TdxAttestError::ExtendFailure(format!("open {path}: {e}")))?; |
| 250 | |
| 251 | file.write_all(digest).map_err(|e| match e.raw_os_error() { |
| 252 | Some(libc::EINVAL) => TdxAttestError::InvalidRtmrIndex(index), |
| 253 | Some(libc::EPERM) | Some(libc::EACCES) => { |
| 254 | TdxAttestError::ExtendFailure(format!("permission denied for RTMR {index}")) |
| 255 | } |
| 256 | _ => TdxAttestError::ExtendFailure(format!("write {path}: {e}")), |
| 257 | }) |
| 258 | } |
| 259 | |
| 260 | fn extend_rtmr_via_ioctl(index: u32, digest: [u8; 48]) -> Result<()> { |
| 261 | let file = OpenOptions::new() |