Attention is currently required from: Nico Huber, Angel Pons, Patrick Rudolph.
Benjamin Doron has posted comments on this change. ( https://review.coreboot.org/c/coreboot/+/50048 )
Change subject: soc/intel/{skylake,cannonlake}: Co-ordinate lockdown configuration
......................................................................
Patch Set 7:
(1 comment)
File src/soc/intel/skylake/chip.c:
https://review.coreboot.org/c/coreboot/+/50048/comment/8ddd9f08_a2b69932
PS5, Line 332: }
Yeah, I'm working on it.
Oh, I didn't know. Currently, I have the initial lock working (but the system hangs on writes to SPI) and I've found that the BIOSWR_STS bit in the TCO_STS register - `(1 << 8)` in the common smihandler - is only applicable to LPC BIOS writes, so smihandler_soc_check_illegal_access() probably is returning early. Instead, we need to check SPI_SYNC_SS in SPI BIOS_CONTROL.
Additionally, there's an MSR to set (0x1fe on Skylake and Cannonlake) when EISS is set. I'll test what I have, then I can push patches.
--
To view, visit
https://review.coreboot.org/c/coreboot/+/50048
To unsubscribe, or for help writing mail filters, visit
https://review.coreboot.org/settings
Gerrit-Project: coreboot
Gerrit-Branch: master
Gerrit-Change-Id: Iab97f545597388d9c4811b5baac82d3e06d86484
Gerrit-Change-Number: 50048
Gerrit-PatchSet: 7
Gerrit-Owner: Benjamin Doron
benjamin.doron00@gmail.com
Gerrit-Reviewer: Angel Pons
th3fanbus@gmail.com
Gerrit-Reviewer: Nico Huber
nico.h@gmx.de
Gerrit-Reviewer: Patrick Rudolph
siro@das-labor.org
Gerrit-Reviewer: Subrata Banik
subrata.banik@intel.com
Gerrit-Reviewer: build bot (Jenkins)
no-reply@coreboot.org
Gerrit-Attention: Nico Huber
nico.h@gmx.de
Gerrit-Attention: Angel Pons
th3fanbus@gmail.com
Gerrit-Attention: Patrick Rudolph
siro@das-labor.org
Gerrit-Comment-Date: Wed, 10 Feb 2021 00:01:50 +0000
Gerrit-HasComments: Yes
Gerrit-Has-Labels: No
Comment-In-Reply-To: Nico Huber
nico.h@gmx.de
Comment-In-Reply-To: Benjamin Doron
benjamin.doron00@gmail.com
Comment-In-Reply-To: Angel Pons
th3fanbus@gmail.com
Gerrit-MessageType: comment