From 0648267c1a77d3f3f41547ede3a19a832842cf6e Mon Sep 17 00:00:00 2001 From: Frans Hendriks Date: Tue, 25 Apr 2023 11:43:29 +0200 Subject: mb/facebook/fbg1701: Add config to additional list MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit ´config´ is removed from measure list (CB:74750) Add 'config' to ram_stage_additional_list[] to have it measured and verified. BUG=NA TEST=boot and verify coreboot logs on facebook FBG1701 Change-Id: Id4119bc3a01e11f14a091facf81964d1a71092c1 Signed-off-by: Frans Hendriks Reviewed-on: https://review.coreboot.org/c/coreboot/+/74752 Tested-by: build bot (Jenkins) Reviewed-by: Himanshu Sahdev Reviewed-by: Martin L Roth --- src/mainboard/facebook/fbg1701/board_verified_boot.c | 4 ++++ src/mainboard/facebook/fbg1701/manifest.h | 3 ++- 2 files changed, 6 insertions(+), 1 deletion(-) (limited to 'src/mainboard/facebook/fbg1701') diff --git a/src/mainboard/facebook/fbg1701/board_verified_boot.c b/src/mainboard/facebook/fbg1701/board_verified_boot.c index 8b644cbef1..4932964409 100644 --- a/src/mainboard/facebook/fbg1701/board_verified_boot.c +++ b/src/mainboard/facebook/fbg1701/board_verified_boot.c @@ -60,6 +60,10 @@ const verify_item_t postcar_verify_list[] = { * romstage verify list */ static const verify_item_t ram_stage_additional_list[] = { +#if CONFIG(INCLUDE_CONFIG_FILE) + { VERIFY_FILE, "config", { { NULL, CBFS_TYPE_RAW } }, + HASH_IDX_CONFIG, MBOOT_PCR_INDEX_0 }, +#endif { VERIFY_FILE, OP_ROM_VBT, { { NULL, CBFS_TYPE_RAW } }, HASH_IDX_OPROM, MBOOT_PCR_INDEX_2 }, #if CONFIG(BMP_LOGO) diff --git a/src/mainboard/facebook/fbg1701/manifest.h b/src/mainboard/facebook/fbg1701/manifest.h index b1043546d9..a89de20f0a 100644 --- a/src/mainboard/facebook/fbg1701/manifest.h +++ b/src/mainboard/facebook/fbg1701/manifest.h @@ -18,5 +18,6 @@ #define HASH_IDX_DSDT 8 #define HASH_IDX_POSTCAR_STAGE 9 #define HASH_IDX_PUBLICKEY 10 -#define HASH_IDX_BOOTBLOCK 11 /* Should always be the last one */ +#define HASH_IDX_CONFIG 11 +#define HASH_IDX_BOOTBLOCK 12 /* Should always be the last one */ #endif -- cgit v1.2.3