#42: Disable SMM on K8 platforms ----------------------------------+----------------------------------------- Reporter: stepan | Owner: stepan Type: defect | Status: assigned Priority: major | Milestone: Going mainstream Component: coreboot | Version: v2 Keywords: SMM, security | Dependencies: Patchstatus: patch needs review | ----------------------------------+-----------------------------------------
Comment(by hailfinger):
What's the status of this patch?
On Mon, Mar 2, 2009 at 3:36 AM, coreboot svn@coreboot.org wrote:
#42: Disable SMM on K8 platforms ----------------------------------+----------------------------------------- Reporter: stepan | Owner: stepan Type: defect | Status: assigned Priority: major | Milestone: Going mainstream Component: coreboot | Version: v2 Keywords: SMM, security | Dependencies: Patchstatus: patch needs review | ----------------------------------+-----------------------------------------
Comment(by hailfinger):
What's the status of this patch?
This has been in the code for a long time. I think that is all that needs to be done.
coreboot-v2/src/cpu/amd/model_fxx/model_fxx_init.c
/* Set SMMLOCK to avoid exploits messing with SMM */ msr = rdmsr(HWCR_MSR); msr.lo |= (1 << 0); wrmsr(HWCR_MSR, msr);
Marc
-
coreboot -
Marc Jones