Benjamin Doron has posted comments on this change. ( https://review.coreboot.org/c/coreboot/+/40830 )
Change subject: [WIP]security/intel: Add option to eanble SMM flash access only ......................................................................
Patch Set 1:
(1 comment)
https://review.coreboot.org/c/coreboot/+/40830/1/src/soc/intel/common/pch/lo... File src/soc/intel/common/pch/lockdown/lockdown.c:
https://review.coreboot.org/c/coreboot/+/40830/1/src/soc/intel/common/pch/lo... PS1, Line 94: soc_lockdown_config Skylake follows the same procedure (_set_bios_interface_lock_down, _set_lock_enable) on the LPC in `soc_lockdown_config` as `fast_spi_lockdown_cfg` above. Is it necessary to implement the above additions over there as well?