/* SPDX-License-Identifier: GPL-2.0-only */ #include <security/intel/txt/txt.h> #include <stdbool.h> #include "memory.h" /** * To be called after DRAM init. * Tells the caller if DRAM must be cleared as requested by the user, * firmware or security framework. */ bool security_clear_dram_request(void) { if (CONFIG(SECURITY_CLEAR_DRAM_ON_REGULAR_BOOT)) return true; if (CONFIG(INTEL_TXT) && intel_txt_memory_has_secrets()) return true; /* TODO: Add TEE environments here */ return false; }