[Feature] Thunderbolt: Integrate thunderbolt user space security level components

[quanxian]

Description:
Support security levels for Thunderbolt. This feature allows users to approve devices before being able to use them.

Target Kernel: 4.13

Target Release: 17.10

[Leann Ogasawara (leannogasawara)]

Do we have a list of upstream kernel commits that we should confirm we are carrying in our Ubuntu kernel target for 17.10? Thanks.

[quanxian (quanxian-wang)]

Kernel Commit: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/log/drivers/thunderbolt?h=v4.13-rc3 (all commits from 2017-06-09 )

User Space Package Readiness: WW34. Git Hub Link: https://github.com/01org/thunderbolt-software-user-space

02b17a41ad102934a3772ffc82f345345c232ee4 046bee1f9ab83b4549c185804ae9cbfbb8f9641f 05c242e9e47d210ed6cbef31f2c441fa6ee325c6 08a5e4cebec543bfa4a6d119fc18f0ed8fd9d8ce 163f1511520386c74a86a2ce2b1dbef07a227713 16a1258af5d8e1bd58e20fc70069f9dd91cc5b34 2c3c4197c9dd878e39e249e1da64bcffceb8a5c4 32af9434f0b9fd31a68bf5be204667c1e17ddffe 390229455535d75a9bdd19437054413d677fc7b0 3e13676862f90dbf5b00d57d5599e57788289897 5e2781bcb1e876d314832489ff8177ef917d9b45 72ee33907b629355d8fd1980140a467041a9f519 800161bd0209a8db77f66af283c379ff8d58d88d 81a54b5e1986d02da33c59133556ce9fe2032049 9d3cce0b613689ee849a505ffac179af0ae9fff2 ac6c44de503e51f0eb757e5321724846525cb29f b2466355c0007cbd853c3babce0cdb6ef1ff23bc bdccf295d7cdf6f28ceec1dcc31a79d0a1697d21 bfe778ac49826ced3dceb6416038e1cd887ce2bd c9843ebbb83a120094aa3a55bc0190d285e8384a cd446ee2e64f03d0e3d8463bf826aaebe0005149 d7f781bfdbf4eb7c5706c9974b8bf6d3c82e69c1 da2da04b8d4476a411feb2a12b47792aebbc142f df1421b5f72979e48096f68c253f59aa7e8e7468 e6b245ccd524441f462f1ca1fe726123dcedeeee f53e7676046db175dc6ac78d429dd5077a9afbba f67cf491175a315ca86c9b349708bfed7b1f40c1

[Leann Ogasawara (leannogasawara)]

Moving linux task to In Progress for this since we are working on the 4.13 rebase for Artful.

02b17a41ad102934a3772ffc82f345345c232ee4 thunderbolt: Refactor and fix parsing of port drom entries
v4.13-rc1~181^2~77

046bee1f9ab83b4549c185804ae9cbfbb8f9641f thunderbolt: Add MSI-X support
v4.13-rc1~181^2~84

05c242e9e47d210ed6cbef31f2c441fa6ee325c6 thunderbolt: Expose make_header() to other files
v4.13-rc1~181^2~73

08a5e4cebec543bfa4a6d119fc18f0ed8fd9d8ce thunderbolt: No need to read UID of the root switch on resume
v4.13-rc1~181^2~87

163f1511520386c74a86a2ce2b1dbef07a227713 thunderbolt: Add documentation how Thunderbolt bus can be used
v4.13-rc1~181^2~63

16a1258af5d8e1bd58e20fc70069f9dd91cc5b34 thunderbolt: Use const buffer pointer in write operations
v4.13-rc1~181^2~88

2c3c4197c9dd878e39e249e1da64bcffceb8a5c4 thunderbolt: Store Thunderbolt generation in the switch structure
v4.13-rc1~181^2~68

32af9434f0b9fd31a68bf5be204667c1e17ddffe thunderbolt: Move control channel messages to tb_msgs.h
v4.13-rc1~181^2~75

390229455535d75a9bdd19437054413d677fc7b0 thunderbolt: Do not fail if DROM data CRC32 is invalid
v4.13-rc1~181^2~78

3e13676862f90dbf5b00d57d5599e57788289897 thunderbolt: Add support for DMA configuration based mailbox
v4.13-rc1~181^2~67

5e2781bcb1e876d314832489ff8177ef917d9b45 thunderbolt: Add new Thunderbolt PCI IDs
v4.13-rc1~181^2~70

72ee33907b629355d8fd1980140a467041a9f519 thunderbolt: Read vendor and device name from DROM
v4.13-rc1~181^2~76

800161bd0209a8db77f66af283c379ff8d58d88d thunderbolt: Correct access permissions for active NVM contents
v4.13-rc2~6^2~8

81a54b5e1986d02da33c59133556ce9fe2032049 thunderbolt: Let the connection manager handle all notifications
v4.13-rc1~181^2~72

9d3cce0b613689ee849a505ffac179af0ae9fff2 thunderbolt: Introduce thunderbolt bus and connection manager
v4.13-rc1~181^2~81

ac6c44de503e51f0eb757e5321724846525cb29f thunderbolt: Expose get_route() to other files
v4.13-rc1~181^2~74

b2466355c0007cbd853c3babce0cdb6ef1ff23bc thunderbolt: Do not warn about newer DROM versions
v4.13-rc1~181^2~85

bdccf295d7cdf6f28ceec1dcc31a79d0a1697d21 thunderbolt: Do not touch the hardware if the NHI is gone on resume
v4.13-rc1~181^2~66

bfe778ac49826ced3dceb6416038e1cd887ce2bd thunderbolt: Convert switch to a device
v4.13-rc1~181^2~80

c9843ebbb83a120094aa3a55bc0190d285e8384a thunderbolt: Allow passing NULL to tb_ctl_free()
v4.13-rc1~181^2~82

cd446ee2e64f03d0e3d8463bf826aaebe0005149 thunderbolt: Add support for NHI mailbox
v4.13-rc1~181^2~69

d7f781bfdbf4eb7c5706c9974b8bf6d3c82e69c1 thunderbolt: Rework control channel to be more reliable
v4.13-rc1~181^2~71

da2da04b8d4476a411feb2a12b47792aebbc142f thunderbolt: Rework capability handling
v4.13-rc1~181^2~83

df1421b5f72979e48096f68c253f59aa7e8e7468 thunderbolt: Do not try to read UID if DROM offset is read as 0
v4.13-rc1~181^2~86

e6b245ccd524441f462f1ca1fe726123dcedeeee thunderbolt: Add support for host and device NVM firmware upgrade
v4.13-rc1~181^2~64

f53e7676046db175dc6ac78d429dd5077a9afbba thunderbolt: Fail switch adding operation if reading DROM fails
v4.13-rc1~181^2~79

f67cf491175a3...

[[e-mail] (pragyan)]

Leann:
User Space Package: Device Approval Bits are now officially released:
Note from Upstream Engineering:
https://github.com/01org/thunderbolt-software-user-space/releases/tag/v0.9
Please note that it’s not on a side branch anymore, we merged it to master branch, so the correct link to the code is just: https://github.com/01org/thunderbolt-software-user-space

[Leann Ogasawara (leannogasawara)]

https://bugs.launchpad.net/intel/+bug/1645525 is tracking the userspace packaging component of this request.

[Seth Forshee (sforshee)]

Closing fix released as 4.13 is now in artful-release.