coreboot-kgpe-d16/src/southbridge
Patrick Rudolph 78feacc440 security: Add common boot media write protection
Introduce boot media protection settings and use the existing
boot_device_wp_region() function to apply settings on all
platforms that supports it yet.

Also remove the Intel southbridge code, which is now obsolete.
Every platform locks the SPIBAR in a different stage.
For align up with the common mrc cache driver and lock after it has been
written to.

Tested on Supermicro X11SSH-TF. The whole address space is write-protected.

Change-Id: Iceb3ecf0bde5cec562bc62d1d5c79da35305d183
Signed-off-by: Patrick Rudolph <patrick.rudolph@9elements.com>
Reviewed-on: https://review.coreboot.org/c/coreboot/+/32704
Tested-by: build bot (Jenkins) <no-reply@coreboot.org>
Reviewed-by: Philipp Deppenwiese <zaolin.daisuki@gmail.com>
Reviewed-by: Julius Werner <jwerner@chromium.org>
2020-04-28 01:19:32 +00:00
..
amd sb/pi/hudson: Const'ify pci_devfn_t devices 2020-04-27 11:32:49 +00:00
intel security: Add common boot media write protection 2020-04-28 01:19:32 +00:00
ricoh/rl5c476 src/southbridge: Use SPDX for GPL-2.0-only files 2020-04-04 14:57:51 +00:00
ti Drop explicit NULL initializations from device_operations 2020-04-05 13:31:28 +00:00