On Tue, Oct 06, 2009 at 04:49:22PM +0200, Luc Verhaegen wrote:
* Make the ROM write-protected.Does that mean we have to unprotect the ROM in flashrom?
Yes.
I think long-term we want a (runtime/CMOS) option for coreboot to enable/disable ROM protection. For now, I guess every chipset does a different thing and/or doesn't explicitly protect or unprotect the ROM at all.
As a safe default I think disabling the ROM write access is the best thing to do from a user's point of view.
I am happy with that if, and only if, the flashrom chipset enable takes care of that.
Sure, flashrom does that. And for other chipsets where we might write-protect the ROM later we also have flashrom chipset support. I cannot think of any chipset where we have coreboot support but no flashrom support (even for CK804 and MCP55 we have).
Uwe.