#513 ThinkPad EEPROM/AssetID - missing dumps and issues

Open
opened 2 years ago by swiftgeek · 3 comments
  • non-vPro variants of all supported GM45 thinkpads (Those with 4MiB flash)
  • R60 and T60 in iGPU and dGPU variants
  • Anything that is not whitelisted in flashrom yet

This will be needed to whitelist devices and fix issues with variants upstream like it is fixed with x200 (4MiB x200 still needs eeprom dump for flashrom whitelist)


WIP draft guide for dumping (assume everything is from root)

  • Make sure following modules are loaded if not compiled into kernel: at24 i2c_smbus i2c_i801 i2c-dev
  • Find out what number is assigned to SMBus adapter via i2cdetect -l or
find -L /sys/bus/i2c/devices/ -maxdepth 2 -type f -name 'name'  -printf "%h: " -execdir cat "{}" \;
  • export I2CBUS=0 (use number obtained from previous step)
  • Tell kernel about 24c08 eeprom on that i2c bus at 0x54 address:
echo 24c08 0x54 > /sys/bus/i2c/devices/i2c-$I2CBUS/new_device
  • eeprom should appear at /sys/bus/i2c/devices/i2c-$I2CBUS/$I2CBUS-0054/eeprom

Do NOT post EEPROM dump publicly, unless you want everyone to see your wired NIC's MAC, board S/Ns, password set in vendor bios and more.

* non-vPro variants of all supported GM45 thinkpads (Those with 4MiB flash) * R60 and T60 in iGPU and dGPU variants * Anything that is not whitelisted in flashrom yet This will be needed to whitelist devices and fix issues with variants upstream like it is fixed with x200 (4MiB x200 still needs eeprom dump for flashrom whitelist) ---- WIP draft guide for dumping (assume everything is from root) * Make sure following modules are loaded if not compiled into kernel: `at24 i2c_smbus i2c_i801 i2c-dev` * Find out what number is assigned to *SMBus adapter* via `i2cdetect -l` or ``` find -L /sys/bus/i2c/devices/ -maxdepth 2 -type f -name 'name' -printf "%h: " -execdir cat "{}" \; ``` * `export I2CBUS=0` (use number obtained from previous step) * Tell kernel about `24c08` eeprom on that i2c bus at `0x54` address: ``` echo 24c08 0x54 > /sys/bus/i2c/devices/i2c-$I2CBUS/new_device ``` * eeprom should appear at `/sys/bus/i2c/devices/i2c-$I2CBUS/$I2CBUS-0054/eeprom` Do **NOT** post EEPROM dump publicly, unless you want **everyone** to see your wired NIC's MAC, board S/Ns, password set in vendor bios and more.

Hi, I have obtained the EEPROM dump for my Thinkpad T400 running Libreboot. How do I sanitize it so that it is safe to post publicly? Running strings doesn't show anything sensitive (or even the MAC address).

Hi, I have obtained the EEPROM dump for my Thinkpad T400 running Libreboot. How do I sanitize it so that it is safe to post publicly? Running `strings` doesn't show anything sensitive (or even the MAC address).
Swift Geek commented 2 months ago
Collaborator

That EEPROM is meant solely to contain such sensitive information (so sanitizing/modifying would defeat the purpose here)

That EEPROM is meant solely to contain such sensitive information (so sanitizing/modifying would defeat the purpose here)

Is there a way I can get it to you privately?

(On my end, I have both GPG and Nextcloud set up.)

Is there a way I can get it to you privately? (On my end, I have both GPG and Nextcloud set up.)
Sign in to join this conversation.
Loading...
Cancel
Save
There is no content yet.