[coreboot-gerrit] Change in coreboot[master]: soc/intel/common/pch/lockdown: Lock at end of BS_POST_DEVICE

[Subrata Banik (Code Review)]

Subrata Banik has posted comments on this change. ( https://review.coreboot.org/c/coreboot/+/39967 )

Change subject: soc/intel/common/pch/lockdown: Lock at end of BS_POST_DEVICE
......................................................................

Patch Set 2:
> Patch Set 2:
>
> I think this was done to not allow option roms to run while settings were unlocked.

Yes Aaron is right,as per recommendation, before 3rd  party opromm, we need to lock down few chipset registers

is there any problem for pushing it out?