soc/intel/cannonlake: lockdown: lock global reset

There are four chipsets selecting PMC_GLOBAL_RESET_ENABLE_LOCK but only
one (apollolake) is actually calling the code. Add the missing call.

Change-Id: I6aba9bcb2ad09e6ae0e02d8c0b552e34bdb3fa72
Signed-off-by: Michael Niewöhner <foss@mniewoehner.de>
Reviewed-on: https://review.coreboot.org/c/coreboot/+/36571
Reviewed-by: Aaron Durbin <adurbin@chromium.org>
Tested-by: build bot (Jenkins) <no-reply@coreboot.org>

src/soc/intel/cannonlake/lockdown.c

@@ -15,6 +15,7 @@
 
 #include <device/mmio.h>
 #include <intelblocks/cfg.h>
+#include <intelblocks/pmclib.h>
 #include <intelpch/lockdown.h>
 #include <soc/pm.h>
 
@@ -60,6 +61,8 @@ static void pmc_lockdown_cfg(int chipset_lockdown)
 	pmc_lock_pmsync();
 	/* Lock down ABASE and sleep stretching policy */
 	pmc_lock_abase();
+	/* Make sure payload/OS can't trigger global reset */
+	pmc_global_reset_disable_and_lock();
 
 	if (chipset_lockdown == CHIPSET_LOCKDOWN_COREBOOT)
 		pmc_lock_smi();