Re: [coreboot] Verify option rom non-execution?

Hello Taiidan, Saturday, November 11, 2017, 12:11:56 AM, you wrote: Tgc> Hi! how can I verify the non-execution of option roms? I recently Tgc> noticed that I had somehow turned that on with one of my latest compiles Tgc> (without yabel secure mode either) You can't really prove a negative,

[coreboot] Verify option rom non-execution?

Hi! how can I verify the non-execution of option roms? I recently noticed that I had somehow turned that on with one of my latest compiles (without yabel secure mode either) The idea is that a hostile firmware update could flash a PCI-e card assigned to a VM and then mess with the host after