[coreboot-gerrit] Change in coreboot[master]: sb/intel/common: Modify CONFIG_LOCK_MANAGEMENT_ENGINE behavior

[Sridhar Siricilla (Code Review)]

Sridhar Siricilla has posted comments on this change. ( https://review.coreboot.org/c/coreboot/+/48267 )

Change subject: sb/intel/common: Modify CONFIG_LOCK_MANAGEMENT_ENGINE behavior
......................................................................

Patch Set 5:

(1 comment)

File src/southbridge/intel/common/firmware/Kconfig:

https://review.coreboot.org/c/coreboot/+/48267/comment/1746df14_9612f02c 
PS5, Line 60: 	default n
> Good call Nico, probably depends on LOCK_MANAGEMENT_ENGINE, since it modifies the behavior of it... […]

@TIm, correct, LOCK_MANAGEMENT_ENGINE does more like touching other master's access permissions than it supposed to do. At least we should limit modifying other master access permissions (like ME/GBE/EC etc) when LOCK_MANAGEMENT_ENGINE is selected. For other master access permissions, IFDTool needs to be enhanced to support granular actions. Thoughts?