[coreboot] Re: Question how to write protect flash

[Public Email Account]

Yes its sandy bridge. What is proper way to do this though. On flash descriptor (and if so, how?) or through coreboot option?

Sent with ProtonMail Secure Email.

‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐
On Monday, July 15, 2019 12:37 AM, [e-mail]  wrote:
> IIRC X220 uses Sandy Bridge. I think there is a flag somewhere in the descriptor where you can lock down your BIOS-region as read-only for the x86 host.
> I never have tried it but in theory this should lead to errors on every write attempt to the BIOS region therefore disabling write access to the flash from OS/flashrom.
>
> Werner