Patch Set 1:

The mrc cache has nothing to do with WP_RO AFAIK it is its own FMAP partition.

You could set FPR in verstage, but it doesn't improve security as the SPIBAR is still locked at end of ramstage. Locking the SPIBAR earlier is not possible as said MRC cache needs to be protected at end of ramstage as well.

View Change

To view, visit change 32705. To unsubscribe, or for help writing mail filters, visit settings.