diff options
| author | Jon Murphy <jpmurphy@google.com> | 2023-06-16 10:23:50 -0600 |
|---|---|---|
| committer | Felix Held <felix-coreboot@felixheld.de> | 2023-07-03 12:45:33 +0000 |
| commit | ccfef8454e6a2b6a02c211b56d9e94661b4c4cc2 (patch) | |
| tree | 53c0b827ae7d3b63056bb8ae9603cfdb36ef4054 | |
| parent | 685097ba3befd40be833f4a8eb43637462d984e4 (diff) | |
| download | coreboot-ccfef8454e6a2b6a02c211b56d9e94661b4c4cc2.tar.gz coreboot-ccfef8454e6a2b6a02c211b56d9e94661b4c4cc2.tar.bz2 coreboot-ccfef8454e6a2b6a02c211b56d9e94661b4c4cc2.zip | |
mb/google/kahlee: Enable Secure OS
Secure OS was disabled on Grunt devices since it isn't used.
This reduces the attack surface and is meant to mitigate potential
security risks. However, this prevents users from using an alternate OS.
Enable Secure OS upstream to allows users to use Windows, and ensure
that it is still disabled in the chromium repo.
BUG=b:287630343
TEST=Builds with Secure OS included.
Cq-Depend: chromium:4620881
Change-Id: I213aebc41cae300ecee8c01fc5c7687f7e7f5ee3
Signed-off-by: Jon Murphy <jpmurphy@google.com>
Reviewed-on: https://review.coreboot.org/c/coreboot/+/75874
Tested-by: build bot (Jenkins) <no-reply@coreboot.org>
Reviewed-by: Raul Rangel <rrangel@chromium.org>
| -rw-r--r-- | src/mainboard/google/kahlee/Kconfig | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/src/mainboard/google/kahlee/Kconfig b/src/mainboard/google/kahlee/Kconfig index 8c8486e65288..3507181083ed 100644 --- a/src/mainboard/google/kahlee/Kconfig +++ b/src/mainboard/google/kahlee/Kconfig @@ -145,8 +145,10 @@ config TPM_SPI_SPEED endif -# Don't use AMD's Secure OS +# Don't use AMD's Secure OS if ChromeOS build. config USE_PSPSECUREOS - def_bool n + bool + default n if CHROMEOS + default y endif # BOARD_GOOGLE_BASEBOARD_KAHLEE |