[Bug 2037688] Re: Pull-request to address TPM bypass issue

** Also affects: linux (Ubuntu)
Importance: Undecided
Status: New

** No longer affects: linux (Ubuntu Jammy)

** Also affects: linux (Ubuntu Noble)
Importance: Undecided
Status: New

** Also affects: linux-nvidia-6.2 (Ubuntu Noble)
Importance: Undecided
Status: New

** No longer affects: linux-nvidia-6.2 (Ubuntu Noble)

--
You received this bug notification because you are subscribed to linux
in Ubuntu.
Matching subscriptions: Bgg, Bmail, Nb
https://bugs.launchpad.net/bugs/2037688

Title:
Pull-request to address TPM bypass issue

Status in linux package in Ubuntu:
New
Status in linux-nvidia-6.2 package in Ubuntu:
Fix Committed
Status in linux-nvidia-6.2 source package in Jammy:
Fix Released
Status in linux source package in Noble:
New

Bug description:
NVIDIA: [Config]: Ensure the TPM is available before IMA
initializes

Set the following configs:

CONFIG_SPI_TEGRA210_QUAD=y
CONFIG_TCG_TIS_SPI=y

On Grace systems, the IMA driver emits the following log:

ima: No TPM chip found, activating TPM-bypass!

This occurs because the IMA driver initializes before we are able to detect
the TPM. This will always be the case when the drivers required to
communicate with the TPM, spi_tegra210_quad and tpm_tis_spi, are built as
modules.

Having these drivers as built-ins ensures that the TPM is available before
the IMA driver initializes.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2037688/+subscriptions