Nico Huber has submitted this change. ( https://review.coreboot.org/c/coreboot/+/36513 )
Change subject: soc/intel/common: sgx: add new Kconfig option for setting LT_LOCK_MEMORY ......................................................................
soc/intel/common: sgx: add new Kconfig option for setting LT_LOCK_MEMORY
Add new Kconfig option for setting LT_LOCK_MEMORY.
Change-Id: I1b232e34a1288ce36a3dce2ab0293c26f10f3881 Signed-off-by: Michael Niewöhner foss@mniewoehner.de Reviewed-on: https://review.coreboot.org/c/coreboot/+/36513 Tested-by: build bot (Jenkins) no-reply@coreboot.org Reviewed-by: Nico Huber nico.h@gmx.de --- M src/soc/intel/common/block/sgx/Kconfig 1 file changed, 7 insertions(+), 0 deletions(-)
Approvals: build bot (Jenkins): Verified Nico Huber: Looks good to me, approved
diff --git a/src/soc/intel/common/block/sgx/Kconfig b/src/soc/intel/common/block/sgx/Kconfig index ffd501a..026c6af 100644 --- a/src/soc/intel/common/block/sgx/Kconfig +++ b/src/soc/intel/common/block/sgx/Kconfig @@ -7,3 +7,10 @@ Software Guard eXtension(SGX) Feature. Intel SGX is a set of new CPU instructions that can be used by applications to set aside private regions of code and data. + +config SOC_INTEL_COMMON_BLOCK_SGX_LOCK_MEMORY + bool + depends on SOC_INTEL_COMMON_BLOCK_SGX + default n + help + Lock memory before SGX activation. This is only needed if MCHECK does not do it.