Change in coreboot[master]: security/tpm/crtm: Measure FMAP into TPM

[Julius Werner (Code Review)]

Julius Werner has posted comments on this change. ( https://review.coreboot.org/c/coreboot/+/52753 )

Change subject: security/tpm/crtm: Measure FMAP into TPM
......................................................................

Patch Set 4:

(1 comment)

File src/security/tpm/tspi/crtm.c:

https://review.coreboot.org/c/coreboot/+/52753/comment/0f4dd72b_40bd9bb3 
PS2, Line 64: TPM_CRTM_PCR
> Done

So why is it runtime? (Sorry, I expected someone else would answer this and it wouldn't go in so quickly...) Isn't "runtime" for data that is somewhat variable and can change between units or boots or something, whereas "CRTM" is for the core code and data components that are fundamental to the security of the system? If so I would definitely expect the FMAP layout to count to CRTM just like all the code stages in CBFS. CBFS is anchored in the FMAP, after all.