diff options
Diffstat (limited to 'meta-openbmc-mods/meta-common/recipes-phosphor/ipmi/phosphor-ipmi-host/0068-Removal-of-OEM-privilege-setting-for-User.patch')
-rw-r--r-- | meta-openbmc-mods/meta-common/recipes-phosphor/ipmi/phosphor-ipmi-host/0068-Removal-of-OEM-privilege-setting-for-User.patch | 43 |
1 files changed, 43 insertions, 0 deletions
diff --git a/meta-openbmc-mods/meta-common/recipes-phosphor/ipmi/phosphor-ipmi-host/0068-Removal-of-OEM-privilege-setting-for-User.patch b/meta-openbmc-mods/meta-common/recipes-phosphor/ipmi/phosphor-ipmi-host/0068-Removal-of-OEM-privilege-setting-for-User.patch new file mode 100644 index 000000000..d66f6fe32 --- /dev/null +++ b/meta-openbmc-mods/meta-common/recipes-phosphor/ipmi/phosphor-ipmi-host/0068-Removal-of-OEM-privilege-setting-for-User.patch @@ -0,0 +1,43 @@ +From 785223a6867f7914e9f549cf06655034eea95b4e Mon Sep 17 00:00:00 2001 +From: srikanta mondal <srikantax.mondal@intel.com> +Date: Fri, 10 Apr 2020 11:35:32 +0000 +Subject: [PATCH] Removal of OEM privilege setting for User + +Issue: Set OEM user Privilege is success for Set user access command + +Fix: Set user access - provided fix to deny set OEM user privilege + for all channel. + +Tested: +Before: +Command: ipmitool raw 0x06 0x43 0x93 0x07 0x05 0x00 // Set user access +Response: // Success + +After: +Command: ipmitool raw 0x06 0x43 0x93 0x07 0x05 0x00 // Set user access +Response: Unable to send RAW command (channel=0x0 netfn=0x6 lun=0x0 + cmd=0x43 rsp=0xcc): Invalid data field in request + +Signed-off-by: srikanta mondal <srikantax.mondal@intel.com> +Change-Id: Iec38bd15d087a34b2178b8b578dc599817b7e3d1 +--- + user_channel/channel_layer.cpp | 3 ++- + 1 file changed, 2 insertions(+), 1 deletion(-) + +diff --git a/user_channel/channel_layer.cpp b/user_channel/channel_layer.cpp +index 38fd43f..03b1729 100644 +--- a/user_channel/channel_layer.cpp ++++ b/user_channel/channel_layer.cpp +@@ -45,7 +45,8 @@ bool doesDeviceExist(const uint8_t chNum) + bool isValidPrivLimit(const uint8_t privLimit) + { + // Callback privilege is deprecated in OpenBMC +- return ((privLimit > PRIVILEGE_CALLBACK) && (privLimit <= PRIVILEGE_OEM)); ++ // At present, "OEM Privilege" is not used in OpenBMC ++ return ((privLimit > PRIVILEGE_CALLBACK) && (privLimit < PRIVILEGE_OEM)); + } + + bool isValidAccessMode(const uint8_t accessMode) +-- +2.17.1 + |