From 99b2f30bd026bd54ad0f4294d7bbfe0dcc317270 Mon Sep 17 00:00:00 2001 From: Angel Pons Date: Fri, 28 Aug 2020 01:57:10 +0200 Subject: cpu/intel/haswell: Set LT_LOCK_MEMORY MSR on finalize step MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This is a security lock and is required for TXT, among other things. Tested on Asrock B85M Pro4, still boots. Change-Id: I7b2e8a60ce92cbf523c520be0b365f28413b9624 Signed-off-by: Angel Pons Reviewed-on: https://review.coreboot.org/c/coreboot/+/44884 Reviewed-by: Michael Niewöhner Tested-by: build bot (Jenkins) --- src/cpu/intel/haswell/finalize.c | 2 ++ 1 file changed, 2 insertions(+) (limited to 'src/cpu/intel/haswell/finalize.c') diff --git a/src/cpu/intel/haswell/finalize.c b/src/cpu/intel/haswell/finalize.c index 1f84b821a9..1832e63967 100644 --- a/src/cpu/intel/haswell/finalize.c +++ b/src/cpu/intel/haswell/finalize.c @@ -6,4 +6,6 @@ void intel_cpu_haswell_finalize_smm(void) { + /* Lock memory configuration to protect SMM */ + msr_set_bit(MSR_LT_LOCK_MEMORY, 0); } -- cgit v1.2.3