[coreboot-gerrit] Change in coreboot[master]: security/intel: Add option to enable SMM flash access only

[Angel Pons (Code Review)]

Attention is currently required from: Nico Huber, Patrick Rudolph, Benjamin Doron.
Angel Pons has posted comments on this change. ( https://review.coreboot.org/c/coreboot/+/40830 )

Change subject: security/intel: Add option to enable SMM flash access only
......................................................................

Patch Set 9:

(1 comment)

File src/soc/intel/common/block/smm/smihandler.c:

https://review.coreboot.org/c/coreboot/+/40830/comment/3ecff269_1ec0db8f 
PS9, Line 296: 	if (CONFIG(SPI_FLASH_SMM))
> `fast_spi_init` sets SPI read config bits (to the same value as before, it's called in bootblock too […]

The call to `fast_spi_enable_wp` is to ensure that WPD does not remain set, which only matters when one wants to restrict write access to flash. Without this, flash remains unprotected until something clears WPD.

In any case, removing the call to `fast_spi_init` as well as the associated discussion does not belong to this patch.