diff options
| author | Mike Baiocchi <mbaiocch@us.ibm.com> | 2017-05-22 17:14:12 -0500 |
|---|---|---|
| committer | Daniel M. Crowell <dcrowell@us.ibm.com> | 2017-06-08 10:08:59 -0400 |
| commit | 4c586e2298ffafed3c1979784e1626868bd46f58 (patch) | |
| tree | b2aab45ecab8d4023ed0f045ddd5370a2fec7320 /src/usr/isteps/pm | |
| parent | 72a32a1058877dd616c72777c6f7545c55117bed (diff) | |
| download | talos-hostboot-4c586e2298ffafed3c1979784e1626868bd46f58.tar.gz talos-hostboot-4c586e2298ffafed3c1979784e1626868bd46f58.zip | |
Disable Ring Overrides in Secure Mode
This commit disables ring overrides during the IPL and at Runtime
when the system has security enabled.
Change-Id: Ic3b0db92994a61d4ba6e28858bcd6fde59be6a23
RTC: 163094
Reviewed-on: http://ralgit01.raleigh.ibm.com/gerrit1/40818
Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com>
Reviewed-by: Stephen M. Cprek <smcprek@us.ibm.com>
Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com>
Reviewed-by: Marshall J. Wilks <mjwilks@us.ibm.com>
Tested-by: Jenkins OP Build CI <op-jenkins+hostboot@us.ibm.com>
Reviewed-by: Daniel M. Crowell <dcrowell@us.ibm.com>
Diffstat (limited to 'src/usr/isteps/pm')
| -rw-r--r-- | src/usr/isteps/pm/pm_common.C | 12 |
1 files changed, 2 insertions, 10 deletions
diff --git a/src/usr/isteps/pm/pm_common.C b/src/usr/isteps/pm/pm_common.C index 0335ebec4..5b0c9372d 100644 --- a/src/usr/isteps/pm/pm_common.C +++ b/src/usr/isteps/pm/pm_common.C @@ -1056,14 +1056,6 @@ namespace HBPM break; #endif - // No overrides in secure mode - if( SECUREBOOT::enabled() ) - { - TRACFCOMP( ISTEPS_TRACE::g_trac_isteps_trace, - INFO_MRK"getRingOvd(): No overrides in secure mode"); - break; - } - PNOR::SectionInfo_t l_pnorRingOvd; l_err = PNOR::getSectionInfo(PNOR::RINGOVD, l_pnorRingOvd); if(l_err) @@ -1071,8 +1063,8 @@ namespace HBPM delete l_err; l_err = NULL; TRACFCOMP( ISTEPS_TRACE::g_trac_isteps_trace, - INFO_MRK"getRingOvd(): RINGOVD section not found, " - "it is optional"); + INFO_MRK"getRingOvd(): RINGOVD section not found or " + "is blocked in secure mode. it is optional"); break; } if(l_pnorRingOvd.size == 0) |
