Attention is currently required from: Nico Huber, Patrick Rudolph, Benjamin Doron.
Why cling to the WPD bit? AFAIR, there is an exploitable race, e.g. one […]
InSMM.STS does not exist on older plaforms. Moreover, InSMM.STS needs special handling when using SMMSTORE, and the point of these patches is to protect the flash chip while allowsing SMMSTORE to work (otherwise I would've simply used protected ranges). Once I have InSMM.STS working, I can enable it by default where supported when one chooses to write-protect the flash through SMM.
To view, visit change 40830. To unsubscribe, or for help writing mail filters, visit settings.