Nico Huber submitted this change.

View Change

soc/intel/common: sgx: add new Kconfig option for setting LT_LOCK_MEMORY

Add new Kconfig option for setting LT_LOCK_MEMORY.

Change-Id: I1b232e34a1288ce36a3dce2ab0293c26f10f3881
Signed-off-by: Michael Niewöhner <foss@mniewoehner.de>
Reviewed-on: https://review.coreboot.org/c/coreboot/+/36513
Tested-by: build bot (Jenkins) <no-reply@coreboot.org>
Reviewed-by: Nico Huber <nico.h@gmx.de>
---
M src/soc/intel/common/block/sgx/Kconfig
1 file changed, 7 insertions(+), 0 deletions(-)

diff --git a/src/soc/intel/common/block/sgx/Kconfig b/src/soc/intel/common/block/sgx/Kconfig
index ffd501a..026c6af 100644
--- a/src/soc/intel/common/block/sgx/Kconfig
+++ b/src/soc/intel/common/block/sgx/Kconfig
@@ -7,3 +7,10 @@
 	 Software Guard eXtension(SGX) Feature. Intel SGX is a set of new CPU
 	 instructions that can be used by applications to set aside private
 	 regions of code and data.
+
+config SOC_INTEL_COMMON_BLOCK_SGX_LOCK_MEMORY
+	bool
+	depends on SOC_INTEL_COMMON_BLOCK_SGX
+	default n
+	help
+	 Lock memory before SGX activation. This is only needed if MCHECK does not do it.

To view, visit change 36513. To unsubscribe, or for help writing mail filters, visit settings.