Kevin O'Connor wrote: > > This patch in particular guarantees that no matter what devices > > are plugged in (e.g. long after the BIOS has been flashed) they > > will not have their option ROMs executed. > > That makes sense, but I think it needs to be a runtime setting.
Timothy's original approach is appealing more and more to me. It's a good way to know that the system will stay as it was when flashed. Runtime setting - the argument there would be that if someone can change the flash contents to create a new CBFS file they could also replace the SeaBIOS payload, right? It is sortof true, but it *is* slightly easier to write data into erased flash than to erase existing and then write something new. //Peter _______________________________________________ SeaBIOS mailing list SeaBIOS@seabios.org http://www.seabios.org/mailman/listinfo/seabios