[coreboot-gerrit] Change in coreboot[master]: security/vboot: Decouple measured boot from verified boot

[Werner Zeh (Code Review)]

Werner Zeh has posted comments on this change. ( https://review.coreboot.org/c/coreboot/+/35077 )

Change subject: security/vboot: Decouple measured boot from verified boot
......................................................................

Patch Set 75:

BTW: This patch does not compile on Apollo Lake when both TPM_MEASURED_BOOT and VBOOT are selected at the same time. This is because Alollo Lake selects VBOOT_STARTS_IN_BOOTBLOCK and now tss.c is added to the bootblock while the tpm driver is not. So there is a linker error right now:

uild/bootblock/security/tpm/tss/tcg-2.0/tss.o: In function `tpm_process_command':
coreboot/src/security/tpm/tss/tcg-2.0/tss.c:44: undefined reference to `tis_sendrecv'
build/bootblock/security/tpm/tss/tcg-2.0/tss.o: In function `tlcl_lib_init':
coreboot/src/security/tpm/tss/tcg-2.0/tss.c:198: undefined reference to `tis_init'
coreboot/src/security/tpm/tss/tcg-2.0/tss.c:203: undefined reference to `tis_open'

Was it meant to have these two options (TPM_MEASURED_BOOT and VBOOT) now exclusive?