GNUBoot
/
coreboot-kgpe-d16
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

vboot: Assign 2 to EC_EFS_BOOT_MODE_TRUSTED_RO 

This patch assings 2 to EC_EFS_BOOT_MODE_TRUSTED_RO to make coreboot
set VB2_CONTEXT_EC_TRUSTED when the GSC reports TRUSTED_RO.

Old GSC doesn't use 2. So, the new BIOS won't mistakenly set
VB2_CONTEXT_EC_TRUSTED.

BUG=b:180927027, b:187871195
BRANCH=none
TEST=build

Change-Id: I11a09d0035a4bd59f80018c647ca17e3318be81e
Signed-off-by: Daisuke Nojiri <dnojiri@chromium.org>
Reviewed-on: https://review.coreboot.org/c/coreboot/+/55373
Reviewed-by: Julius Werner <jwerner@chromium.org>
Tested-by: build bot (Jenkins) <no-reply@coreboot.org>
This commit is contained in:
Daisuke Nojiri 2021-05-12 12:50:41 -07:00 committed by Julius Werner
parent 08f4526b53
commit 494a5dd7f5
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/security/vboot/vboot_logic.c
View File

@ -212,9 +212,9 @@ static uint32_t extend_pcrs(struct vb2_context *ctx)
vboot_extend_pcr(ctx, 1, HWID_DIGEST_PCR);
}
#define EC_EFS_BOOT_MODE_TRUSTED_RO 0x00
#define EC_EFS_BOOT_MODE_VERIFIED_RW 0x00
#define EC_EFS_BOOT_MODE_UNTRUSTED_RO 0x01
#define EC_EFS_BOOT_MODE_VERIFIED_RW 0x02
#define EC_EFS_BOOT_MODE_TRUSTED_RO 0x02
static const char *get_boot_mode_string(uint8_t boot_mode)
{