Hello build bot (Jenkins), Furquan Shaikh, Jamie Ryu, Maulik V Vaghela, Rizwan Qureshi, Stefan Reinauer, Karthik Ramasubramanian,
I'd like you to reexamine a change. Please visit
https://review.coreboot.org/c/coreboot/+/46441
to look at the new patch set (#10).
Change subject: util/ifdtool: Enable CPU read of the ME region ......................................................................
util/ifdtool: Enable CPU read of the ME region
We are implementing a mechanism in coreboot to update CSME firmware, this requires coreboot to be able to read CSME region. Exposing the CSME data is not an issue since the data stored by CSE is all encrypted.
This patch provides a command line option "-r" which will enable read access to CSME region when locking.
Without this change, locking SPI regions using ifdtool will block BIOS access to read/access CSME. This will cause failure since BIOS can't read basic information such as CSME version.
TEST=Flashrom returns success while erasing the SI_ME region. After rebooting the DUT, DUT boots into OS without any issues on Drawlat EVT.
Signed-off-by: Usha P usha.p@intel.com Change-Id: I1d9a8e17fba19b717453476fbcb7bcf95b278abe --- M util/ifdtool/ifdtool.c 1 file changed, 29 insertions(+), 2 deletions(-)
git pull ssh://review.coreboot.org:29418/coreboot refs/changes/41/46441/10