Aaron Durbin (adurbin@chromium.org) just uploaded a new patch set to gerrit, which you can find at https://review.coreboot.org/18304
-gerrit
commit c72149782e4c0dc54f06529bd03100f7aad2457b Author: Aaron Durbin adurbin@chromium.org Date: Fri Feb 3 16:09:45 2017 -0600
southbridge/intel/common/firmware: allow locking ME without HAVE_ME_BIN
The apollolake boards don't have an me.bin proper, but they still have descriptor regions which need to be locked down. Therefore, remove the restriction of HAVE_ME_BIN from LOCK_MANAGEMENT_ENGINE.
BUG=chrome-os-partner:62177 TEST=For apollolake one can select LOCK_MANAGEMENT_ENGINE.
Change-Id: I73aab3a604ec25cd56d760bf76cc21c5a298799e Signed-off-by: Aaron Durbin adurbin@chromium.org --- src/southbridge/intel/common/firmware/Kconfig | 1 - 1 file changed, 1 deletion(-)
diff --git a/src/southbridge/intel/common/firmware/Kconfig b/src/southbridge/intel/common/firmware/Kconfig index af26b2d..da40db0 100644 --- a/src/southbridge/intel/common/firmware/Kconfig +++ b/src/southbridge/intel/common/firmware/Kconfig @@ -165,7 +165,6 @@ config IFD_PLATFORM_SECTION
config LOCK_MANAGEMENT_ENGINE bool "Lock ME/TXE section" - depends on HAVE_ME_BIN default n help The Intel Firmware Descriptor supports preventing write accesses