Patch Set 1:

TOCTOU attacks are possible, also you should always directly lockdown the WP_RO is executed. It is never a good idea to do that in a later stage. So please add a hook for vboot_logic.c in the earliest possible part

Please give an example. I don't see how that's possible.

Locking it early will break other functionally in ramstage, like protecting mrc cache.

View Change

To view, visit change 32705. To unsubscribe, or for help writing mail filters, visit settings.