[coreboot-gerrit] Change in coreboot[master]: security: Add common boot media write protection

[Patrick Rudolph (Code Review)]

Patrick Rudolph has posted comments on this change. ( https://review.coreboot.org/c/coreboot/+/32704 )

Change subject: security: Add common boot media write protection
......................................................................

Patch Set 12:

(1 comment)

I'm using two options for now that are aligned with the mrccache driver.

https://review.coreboot.org/c/coreboot/+/32704/11/src/security/lockdown/Kcon... 
File src/security/lockdown/Kconfig:

https://review.coreboot.org/c/coreboot/+/32704/11/src/security/lockdown/Kcon... 
PS11, Line 33: Select this if you want to write-protect the whole firmware boot
             : 	  medium using the controller. The locking will take place during the
             : 	  chipset lockdown, which is either triggered by coreboot
             : 	  (when INTEL_CHIPSET_LOCKDOWN is set) or has to be triggered later
             : 	  (e.g. by the payload or the OS).
> Some of this text needs moving/updating.

Done