[coreboot-gerrit] Change in coreboot[master]: cpu/intel/common: Enable GetSec leaves for Intel TXT

[Patrick Georgi (Code Review)]

Patrick Georgi has submitted this change. ( https://review.coreboot.org/c/coreboot/+/36092 )

Change subject: cpu/intel/common: Enable GetSec leaves for Intel TXT
......................................................................

cpu/intel/common: Enable GetSec leaves for Intel TXT

Similar to VMX and SMX also enable all GetSec leaves for Intel TXT.

Change-Id: I89620c2a98cfceaa785b1a798fafbf35cc99a0b2
Signed-off-by: Patrick Rudolph 
Reviewed-on: https://review.coreboot.org/c/coreboot/+/36092
Tested-by: build bot (Jenkins) 
Reviewed-by: Philipp Deppenwiese 
---
M src/cpu/intel/common/common_init.c
1 file changed, 6 insertions(+), 1 deletion(-)

Approvals:
  build bot (Jenkins): Verified
  Philipp Deppenwiese: Looks good to me, approved

diff --git a/src/cpu/intel/common/common_init.c b/src/cpu/intel/common/common_init.c
index 2fff90c..9819ee7 100644
--- a/src/cpu/intel/common/common_init.c
+++ b/src/cpu/intel/common/common_init.c
@@ -56,8 +56,13 @@

if (enable) {
    	msr.lo |= (1 << 2);
-		if (feature_flag & CPUID_SMX)
+		if (feature_flag & CPUID_SMX) {
    		msr.lo |= (1 << 1);
+			if (CONFIG(INTEL_TXT)) {
+				/* Enable GetSec and all GetSec leaves */
+				msr.lo |= (0xff << 8);
+			}
+		}
    }

wrmsr(IA32_FEATURE_CONTROL, msr);