>> I would pretty much prefer the opposite, i.e. only modify
>> the descriptor if asked to.
>>
>> In any case, as this implementation only affects the
>> descriptor lock, a Kconfig choice would be better. Would
>> make both Kconfig and Makefile simpler, I guess.
>
> Just so I get it right, you mean that else branch of CONFIG_LOCK_MANAGEMENT_ENGINE in the Makefile doesn’t use ifdtool, right?

Um, no, there are three cases: 1. We want to leave the des-
criptor untouched (I think this should be the default). 2.
We want to make sure it's locked. 3. We want to make sure
it's unlocked. Hence a Kconfig `choice` would reflect that
much better.

In the Makefile this could be two separate `if` statements,
one for 2. and one for 3. And if none are taken, 1. is
implied.

View Change

To view, visit change 31639. To unsubscribe, or for help writing mail filters, visit settings.

Gerrit-Project: coreboot
Gerrit-Branch: master
Gerrit-Change-Id: I46ec6339008edcc78fe76682eed5714f85354937
Gerrit-Change-Number: 31639
Gerrit-PatchSet: 3
Gerrit-Owner: Mario Scheithauer <mario.scheithauer@siemens.com>
Gerrit-Reviewer: Mario Scheithauer <mario.scheithauer@siemens.com>
Gerrit-Reviewer: Martin Roth <martinroth@google.com>
Gerrit-Reviewer: Nico Huber <nico.h@gmx.de>
Gerrit-Reviewer: Patrick Georgi <pgeorgi@google.com>
Gerrit-Reviewer: Patrick Rudolph <siro@das-labor.org>
Gerrit-Reviewer: build bot (Jenkins) <no-reply@coreboot.org>
Gerrit-CC: Angel Pons <th3fanbus@gmail.com>
Gerrit-CC: Furquan Shaikh <furquan@google.com>
Gerrit-CC: Paul Menzel <paulepanter@users.sourceforge.net>
Gerrit-Comment-Date: Thu, 28 Feb 2019 17:15:04 +0000
Gerrit-HasComments: No
Gerrit-Has-Labels: No
Gerrit-MessageType: comment