Change in coreboot[master]: soc/intel/common: sgx: add new Kconfig option for setting LT_LOCK_MEMORY

[Nico Huber (Code Review)]

Nico Huber has submitted this change. ( https://review.coreboot.org/c/coreboot/+/36513 )

Change subject: soc/intel/common: sgx: add new Kconfig option for setting LT_LOCK_MEMORY
......................................................................

soc/intel/common: sgx: add new Kconfig option for setting LT_LOCK_MEMORY

Add new Kconfig option for setting LT_LOCK_MEMORY.

Change-Id: I1b232e34a1288ce36a3dce2ab0293c26f10f3881
Signed-off-by: Michael Niewöhner 
Reviewed-on: https://review.coreboot.org/c/coreboot/+/36513
Tested-by: build bot (Jenkins) 
Reviewed-by: Nico Huber 
---
M src/soc/intel/common/block/sgx/Kconfig
1 file changed, 7 insertions(+), 0 deletions(-)

Approvals:
  build bot (Jenkins): Verified
  Nico Huber: Looks good to me, approved

diff --git a/src/soc/intel/common/block/sgx/Kconfig b/src/soc/intel/common/block/sgx/Kconfig
index ffd501a..026c6af 100644
--- a/src/soc/intel/common/block/sgx/Kconfig
+++ b/src/soc/intel/common/block/sgx/Kconfig
@@ -7,3 +7,10 @@
     Software Guard eXtension(SGX) Feature. Intel SGX is a set of new CPU
     instructions that can be used by applications to set aside private
     regions of code and data.
+
+config SOC_INTEL_COMMON_BLOCK_SGX_LOCK_MEMORY
+	bool
+	depends on SOC_INTEL_COMMON_BLOCK_SGX
+	default n
+	help
+	 Lock memory before SGX activation. This is only needed if MCHECK does not do it.