Hello build bot (Jenkins), Maulik V Vaghela, Stefan Reinauer, Rizwan Qureshi,
I'd like you to reexamine a change. Please visit
https://review.coreboot.org/c/coreboot/+/46441
to look at the new patch set (#5).
Change subject: util/ifdtool: Enable CPU read for ME region ......................................................................
util/ifdtool: Enable CPU read for ME region
Using ifdtool after generating and flashing coreboot image for locking RW access for JSL platform, 1. Flashrom should return success while erasing the SI_ME region and 2. After rebooting the DUT should boot into OS without any issues.
But we see DUT is rebooting continuously after flashing the newly generated coreboot.bin.new
This patch adds the code to enable CPU read for ME region after the ME lock operation. The security impact is taken care as the private data stored by CSE is all encrypted.
TEST=Flashrom returns success while erasing the SI_ME region. After rebooting the DUT, DUT boots into OS without any issues on Drawlat EVT.
Signed-off-by: Usha P usha.p@intel.com Change-Id: I1d9a8e17fba19b717453476fbcb7bcf95b278abe --- M util/ifdtool/ifdtool.c 1 file changed, 2 insertions(+), 0 deletions(-)
git pull ssh://review.coreboot.org:29418/coreboot refs/changes/41/46441/5