GNUBoot
/
coreboot-kgpe-d16
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

security/intel/cbnt: Remove fixed size requirement 

The CBnT provisioning tooling in intel-sec-tools are now cbfs aware
and don't need to have a fixed size at buildtime.

Tested on OCP/Deltalake with CBnT enabled.

Change-Id: I446b5045fe65f51c5fa011895cd56dbd25b6ccc7
Signed-off-by: Arthur Heymans <arthur@aheymans.xyz>
Reviewed-on: https://review.coreboot.org/c/coreboot/+/55821
Reviewed-by: Angel Pons <th3fanbus@gmail.com>
Reviewed-by: Christopher Meis <christopher.meis@9elements.com>
Reviewed-by: Christian Walter <christian.walter@9elements.com>
Reviewed-by: Kyösti Mälkki <kyosti.malkki@gmail.com>
Tested-by: build bot (Jenkins) <no-reply@coreboot.org>
This commit is contained in:
Arthur Heymans 2021-06-24 11:30:32 +02:00 committed by Patrick Georgi
parent 8a85a84fac
commit e243a60efe
2 changed files with 0 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
src/mainboard/ocp/deltalake/Kconfig
View File

@ -58,11 +58,4 @@ config CONSOLE_POST
bool bool
default y default y
config C_ENV_BOOTBLOCK_SIZE
hex
default 0xc000 if FIXED_BOOTBLOCK_SIZE
help
This matches the IBB size used for CBnT. Adjust this to the
used CBnT settings.
endif # BOARD_OCP_DELTALAKE endif # BOARD_OCP_DELTALAKE

1
src/security/intel/cbnt/Kconfig
View File

@ -7,7 +7,6 @@ config INTEL_CBNT_SUPPORT
#depends on PLATFORM_HAS_DRAM_CLEAR #depends on PLATFORM_HAS_DRAM_CLEAR
select INTEL_TXT select INTEL_TXT
# With CBnT the bootblock is set up as a CBnT IBB and needs a fixed size # With CBnT the bootblock is set up as a CBnT IBB and needs a fixed size
select FIXED_BOOTBLOCK_SIZE
select TPM_MEASURED_BOOT_INIT_BOOTBLOCK if TPM_MEASURED_BOOT select TPM_MEASURED_BOOT_INIT_BOOTBLOCK if TPM_MEASURED_BOOT
help help
Enables Intel Converged Bootguard and Trusted Execution Technology Enables Intel Converged Bootguard and Trusted Execution Technology