GNUBoot
/
coreboot-kgpe-d16
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

3rdparty/intel-sec-tools: Update submodule pointer 

Some changes:
- bg-prov got renamed to cbnt-prov
- cbfs support was added which means that providing IBB.Base/Size
  separatly is not required anymore. Also fspt.bin gets added as an
  IBB to secure the root of trust.

Change-Id: I20379e9723fa18e0ebfb0622c050524d4e6d2717
Signed-off-by: Arthur Heymans <arthur@aheymans.xyz>
Reviewed-on: https://review.coreboot.org/c/coreboot/+/52971
Reviewed-by: Christian Walter <christian.walter@9elements.com>
Reviewed-by: Angel Pons <th3fanbus@gmail.com>
Tested-by: build bot (Jenkins) <no-reply@coreboot.org>
This commit is contained in:
Arthur Heymans 2021-05-04 08:15:22 +02:00
parent 53164ba286
commit f69cece074
2 changed files with 4 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
3rdparty/intel-sec-tools vendored

@ -1 +1 @@
Subproject commit 2b028cc0e3cdaf1aa3110b6367eb232e9ec9d9c8 Subproject commit 875763e421ed3a76ec0e0f51c4ed93c6a0038771

8
src/security/intel/cbnt/Makefile.inc
View File

@ -28,7 +28,7 @@ $(CBNT_PROV):
cd 3rdparty/intel-sec-tools; \ cd 3rdparty/intel-sec-tools; \
GO111MODULE=on go mod download; \ GO111MODULE=on go mod download; \
GO111MODULE=on go mod verify; \ GO111MODULE=on go mod verify; \
GO111MODULE=on go build -o $(top)/$@ cmd/bg-prov/*.go GO111MODULE=on go build -o $(top)/$@ cmd/cbnt-prov/*.go
$(CBNT_CFG): $(call strip_quotes, $(CONFIG_INTEL_CBNT_CBNT_PROV_CFG_FILE)) $(CBNT_CFG): $(call strip_quotes, $(CONFIG_INTEL_CBNT_CBNT_PROV_CFG_FILE))
cp $(CONFIG_INTEL_CBNT_CBNT_PROV_CFG_FILE) $@ cp $(CONFIG_INTEL_CBNT_CBNT_PROV_CFG_FILE) $@
@ -50,10 +50,8 @@ $(obj)/bpm_unsigned.bin: $(obj)/coreboot.rom $(CBNT_PROV)
--ibbflags=$(CONFIG_INTEL_CBNT_IBB_FLAGS) \ --ibbflags=$(CONFIG_INTEL_CBNT_IBB_FLAGS) \
--entrypoint=$(shell printf "%d" 0xfffffff0) \ --entrypoint=$(shell printf "%d" 0xfffffff0) \
--ibbhash=11,4,12 \ --ibbhash=11,4,12 \
--ibbsegbase=$(call int-add, $(call int-subtract, 0xffffffff $(CONFIG_C_ENV_BOOTBLOCK_SIZE)) 1) \ --coreboot \
--ibbsegsize=$(shell printf "%d" $(CONFIG_C_ENV_BOOTBLOCK_SIZE)) \ --sinitmin=$(CONFIG_INTEL_CBNT_SINIT_SVN) \
--ibbsegflag=0 \
--sintmin=$(CONFIG_INTEL_CBNT_SINIT_SVN) \
--txtflags=0 \ --txtflags=0 \
--powerdowninterval=$(CONFIG_INTEL_CBNT_PD_INTERVAL) \ --powerdowninterval=$(CONFIG_INTEL_CBNT_PD_INTERVAL) \
--acpibaseoffset=$(shell printf "%d" $(CONFIG_INTEL_ACPI_BASE_ADDRESS)) \ --acpibaseoffset=$(shell printf "%d" $(CONFIG_INTEL_ACPI_BASE_ADDRESS)) \