summaryrefslogtreecommitdiff
path: root/src/security/memory/memory.c
blob: c4f3bdd68f5e0e6c1e07406343269f96d7bf5a10 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
/* SPDX-License-Identifier: GPL-2.0-only */

#include <security/intel/txt/txt.h>
#include <stdbool.h>

#include "memory.h"

/**
 * To be called after DRAM init.
 * Tells the caller if DRAM must be cleared as requested by the user,
 * firmware or security framework.
 */
bool security_clear_dram_request(void)
{
	if (CONFIG(SECURITY_CLEAR_DRAM_ON_REGULAR_BOOT))
		return true;

	if (CONFIG(INTEL_TXT) && intel_txt_memory_has_secrets())
		return true;

	/* TODO: Add TEE environments here */

	return false;
}