From ccfef8454e6a2b6a02c211b56d9e94661b4c4cc2 Mon Sep 17 00:00:00 2001 From: Jon Murphy Date: Fri, 16 Jun 2023 10:23:50 -0600 Subject: mb/google/kahlee: Enable Secure OS Secure OS was disabled on Grunt devices since it isn't used. This reduces the attack surface and is meant to mitigate potential security risks. However, this prevents users from using an alternate OS. Enable Secure OS upstream to allows users to use Windows, and ensure that it is still disabled in the chromium repo. BUG=b:287630343 TEST=Builds with Secure OS included. Cq-Depend: chromium:4620881 Change-Id: I213aebc41cae300ecee8c01fc5c7687f7e7f5ee3 Signed-off-by: Jon Murphy Reviewed-on: https://review.coreboot.org/c/coreboot/+/75874 Tested-by: build bot (Jenkins) Reviewed-by: Raul Rangel --- src/mainboard/google/kahlee/Kconfig | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) (limited to 'src') diff --git a/src/mainboard/google/kahlee/Kconfig b/src/mainboard/google/kahlee/Kconfig index 8c8486e652..3507181083 100644 --- a/src/mainboard/google/kahlee/Kconfig +++ b/src/mainboard/google/kahlee/Kconfig @@ -145,8 +145,10 @@ config TPM_SPI_SPEED endif -# Don't use AMD's Secure OS +# Don't use AMD's Secure OS if ChromeOS build. config USE_PSPSECUREOS - def_bool n + bool + default n if CHROMEOS + default y endif # BOARD_GOOGLE_BASEBOARD_KAHLEE -- cgit v1.2.3