0001 # SPDX-License-Identifier: GPL-2.0-only
0002 config EFI_SECRET
0003 tristate "EFI secret area securityfs support"
0004 depends on EFI && X86_64
0005 select EFI_COCO_SECRET
0006 select SECURITYFS
0007 help
0008 This is a driver for accessing the EFI secret area via securityfs.
0009 The EFI secret area is a memory area designated by the firmware for
0010 confidential computing secret injection (for example for AMD SEV
0011 guests). The driver exposes the secrets as files in
0012 <securityfs>/secrets/coco. Files can be read and deleted (deleting
0013 a file wipes the secret from memory).
0014
0015 To compile this driver as a module, choose M here.
0016 The module will be called efi_secret.
