[coreboot] Re: Locking coreboot against internal flashing

2019-02-17 Thread Frank Beuth
On Sun, Feb 17, 2019 at 12:24:38PM +0100, Nico Huber wrote: I'm not sure if I quite follow. You mean the locking that prevents you from installing a retrofitted coreboot? That's not a lock that prevents malware from anything (because of existing exploits). There are ways to install coreboot on su

[coreboot] Re: Locking coreboot against internal flashing

2019-02-17 Thread Prasun Gera
> > Again, you seem to imply a retrofitted coreboot. If you can tell me any > model with a firmware lock in particular, I can try to compare it to the > coreboot situation for that model. > I think the most common retrofitted coreboot solution that people use is for older thinkpads. So it seems re

[coreboot] FSP Memory down setup

2019-02-17 Thread Zvi Vered
Helllo, In my BayTrail module, Enable Memory Down = Enabled. In this case are the following parameters relevant ? DIMM 0 Enable DIMM 1 Enable DIMM_DWidth DIMM_Density DIMM _BusWidth DIMM_Sides Thank you, Zvika ___ coreboot mailing list -- coreboot@core

[coreboot] Re: AMDFlaws

2019-02-17 Thread Kyösti Mälkki
On Sun, Feb 17, 2019 at 8:47 AM Mike Banon wrote: > Hi, Almost all the coreboot-supported AMD 16h boards are AMD _early_ 16h > (so no PSP). Please tell what 16h systems do you have, maybe they > don't have a PSP at all? > > Well pcengines/apu2 variants are fam16h model30h with PSP. I have done

[coreboot] Re: Locking coreboot against internal flashing

2019-02-17 Thread persmule
在 2019/2/17 下午5:02, Nico Huber 写道: > When you are sure that you want a lock, you still have to decide what > kind of lock. And that depends on what you actually want to protect > against (e.g. online attack by a compromised OS) and how much flexi- > bility you are willing to sacrifice (e.g. online

[coreboot] Re: Locking coreboot against internal flashing

2019-02-17 Thread Nico Huber
On 17.02.19 11:12, Frank Beuth wrote: > On Sun, Feb 17, 2019 at 10:02:42AM +0100, Nico Huber wrote: >> What, why? Did you just say "SeaBIOS" because I said "sometimes ... >> payload"? >> >> SeaBIOS is a very generic payload, trying not to be board specific. And >> I just said it depends on the hard

[coreboot] Re: Locking coreboot against internal flashing

2019-02-17 Thread Frank Beuth
On Sun, Feb 17, 2019 at 10:02:42AM +0100, Nico Huber wrote: What, why? Did you just say "SeaBIOS" because I said "sometimes ... payload"? SeaBIOS is a very generic payload, trying not to be board specific. And I just said it depends on the hardware. Also, all generic, one-fits-all- scenarios sol

[coreboot] Re: Locking coreboot against internal flashing

2019-02-17 Thread persmule
在 2019/2/17 下午5:02, Nico Huber 写道: > When you are sure that you want a lock, you still have to decide what > kind of lock. And that depends on what you actually want to protect > against (e.g. online attack by a compromised OS) and how much flexi- > bility you are willing to sacrifice (e.g. online

[coreboot] Re: Locking coreboot against internal flashing

2019-02-17 Thread Nico Huber
On 17.02.19 02:35, Frank Beuth wrote: > On Sat, Feb 16, 2019 at 06:00:26PM +0100, Nico Huber wrote: >> Generally, what locking options you have depend much on your hardware. >> Hence, there is no generic solution in coreboot. Plus, coreboot is more >> a firmware framework than a firmware. It can on