On Mon, Mar 2, 2009 at 3:36 AM, coreboot <[email protected]> wrote:
> #42: Disable SMM on K8 platforms
> ----------------------------------+-----------------------------------------
> Reporter: stepan | Owner: stepan
> Type: defect | Status: assigned
> Priority: major | Milestone: Going mainstream
> Component: coreboot | Version: v2
> Keywords: SMM, security | Dependencies:
> Patchstatus: patch needs review |
> ----------------------------------+-----------------------------------------
>
> Comment(by hailfinger):
>
> What's the status of this patch?
>
This has been in the code for a long time. I think that is all that
needs to be done.
coreboot-v2/src/cpu/amd/model_fxx/model_fxx_init.c
/* Set SMMLOCK to avoid exploits messing with SMM */
msr = rdmsr(HWCR_MSR);
msr.lo |= (1 << 0);
wrmsr(HWCR_MSR, msr);
Marc
--
coreboot mailing list: [email protected]
http://www.coreboot.org/mailman/listinfo/coreboot
