[coreboot-gerrit] Change in coreboot[master]: cpu/intel/common: Enable GetSec leafes for Intel TXT

[Patrick Rudolph (Code Review)]

Patrick Rudolph has uploaded this change for review. ( https://review.coreboot.org/c/coreboot/+/36092 )

Change subject: cpu/intel/common: Enable GetSec leafes for Intel TXT
......................................................................

cpu/intel/common: Enable GetSec leafes for Intel TXT

Similar to VMX and SMX also enable all GetSec leafes for Intel TXT.

Change-Id: I89620c2a98cfceaa785b1a798fafbf35cc99a0b2
Signed-off-by: Patrick Rudolph 
---
M src/cpu/intel/common/common_init.c
1 file changed, 6 insertions(+), 1 deletion(-)

git pull ssh://review.coreboot.org:29418/coreboot refs/changes/92/36092/1

diff --git a/src/cpu/intel/common/common_init.c b/src/cpu/intel/common/common_init.c
index 2fff90c..93d324e 100644
--- a/src/cpu/intel/common/common_init.c
+++ b/src/cpu/intel/common/common_init.c
@@ -56,8 +56,13 @@

if (enable) {
    	msr.lo |= (1 << 2);
-		if (feature_flag & CPUID_SMX)
+		if (feature_flag & CPUID_SMX) {
    		msr.lo |= (1 << 1);
+			if (CONFIG(INTEL_TXT)) {
+				/* Enable GetSec and all GetSec leafes */
+				msr.lo |= (0xff << 8);
+			}
+		}
    }

wrmsr(IA32_FEATURE_CONTROL, msr);