erebion/coreboot
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

UPSTREAM: southbridge/intel/common/firmware: allow locking ME without HAVE_ME_BIN

Browse source 
The apollolake boards don't have an me.bin proper, but they still have
descriptor regions which need to be locked down. Therefore, remove the
restriction of HAVE_ME_BIN from LOCK_MANAGEMENT_ENGINE.

BUG=chrome-os-partner:62177
TEST=For apollolake one can select LOCK_MANAGEMENT_ENGINE.

Change-Id: I420578dd0002135be172abfc4681ffd6d3d6f43d
Signed-off-by: Patrick Georgi <pgeorgi@chromium.org>
Original-Commit-Id: 0254c2d99f
Original-Change-Id: I73aab3a604ec25cd56d760bf76cc21c5a298799e
Original-Signed-off-by: Aaron Durbin <adurbin@chromium.org>
Original-Reviewed-on: https://review.coreboot.org/18304
Original-Reviewed-by: Duncan Laurie <dlaurie@chromium.org>
Original-Tested-by: build bot (Jenkins)
Original-Reviewed-by: Furquan Shaikh <furquan@google.com>
Reviewed-on: https://chromium-review.googlesource.com/440165
This commit is contained in:
Aaron Durbin 2017-02-03 16:09:45 -06:00 • committed by chrome-bot
commit a4e45b24ce
1 changed files with 0 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

1
src/southbridge/intel/common/firmware/Kconfig
View file

@ -165,7 +165,6 @@ config IFD_PLATFORM_SECTION
config LOCK_MANAGEMENT_ENGINE
bool "Lock ME/TXE section"
depends on HAVE_ME_BIN
default n
help
The Intel Firmware Descriptor supports preventing write accesses