[coreboot] #42: Disable SMM on K8 platforms

[Marc Jones]

On Mon, Mar 2, 2009 at 3:36 AM, coreboot <svn at coreboot.org> wrote:
> #42: Disable SMM on K8 platforms
> ----------------------------------+-----------------------------------------
>   Reporter:  stepan              |          Owner:  stepan
>       Type:  defect              |         Status:  assigned
>   Priority:  major               |      Milestone:  Going mainstream
>  Component:  coreboot            |        Version:  v2
>   Keywords:  SMM, security       |   Dependencies:
> Patchstatus:  patch needs review  |
> ----------------------------------+-----------------------------------------
>
> Comment(by hailfinger):
>
>  What's the status of this patch?
>

This has been in the code for a long time. I think that is all that
needs to be done.

coreboot-v2/src/cpu/amd/model_fxx/model_fxx_init.c

	/* Set SMMLOCK to avoid exploits messing with SMM */
	msr = rdmsr(HWCR_MSR);
	msr.lo |= (1 << 0);
	wrmsr(HWCR_MSR, msr);

Marc