Re: [edk2] multiple levels of support for MOR / MORLock

2017-10-01 Thread Yao, Jiewen
I believe it is legal that SMM code calls UEFI services before SMM_READY_TO_LOCK event. For example, SMM_CORE calls gBS->LocateProtocol(), and mSecurity->FileAuthenticationState(), until SmmReadyToLock event triggered. SMM_CPU driver calls gDS->GetMemorySpaceMap() at SmmReadyToLock event. Becau

Re: [edk2] multiple levels of support for MOR / MORLock

2017-10-01 Thread Laszlo Ersek
On 10/01/17 05:56, Yao, Jiewen wrote: > Good test! Thanks for the investigation. > > That is a little annoying. Agreed! In a virtualization-only scenario, I wouldn't care much (it's very unusual to install two OSes in the same VM and "dual boot" them), but on physical machines, dual-booting Wind