diff options
| author | Laszlo Ersek <lersek@redhat.com> | 2015-11-30 18:41:10 +0000 |
|---|---|---|
| committer | lersek <lersek@Edk2> | 2015-11-30 18:41:10 +0000 |
| commit | 1f695483e6bc2be8054d2cc677662e7df61e3962 (patch) | |
| tree | f5ca65ed728eb8fec8b353ef96ed777428a68dac /OvmfPkg/OvmfPkg.dec | |
| parent | 8786ba4fe7220d24c41bf1386b7186eabda00a0c (diff) | |
| download | edk2-1f695483e6bc2be8054d2cc677662e7df61e3962.tar.gz edk2-1f695483e6bc2be8054d2cc677662e7df61e3962.tar.bz2 edk2-1f695483e6bc2be8054d2cc677662e7df61e3962.zip | |
OvmfPkg: introduce -D SMM_REQUIRE and PcdSmmSmramRequire
This build time flag and corresponding Feature PCD will control whether
OVMF supports (and, equivalently, requires) SMM/SMRAM support from QEMU.
Contributed-under: TianoCore Contribution Agreement 1.0
Signed-off-by: Laszlo Ersek <lersek@redhat.com>
Reviewed-by: Jordan Justen <jordan.l.justen@intel.com>
git-svn-id: https://svn.code.sf.net/p/edk2/code/trunk/edk2@19034 6f19259b-4bc3-4df7-8a09-765794883524
Diffstat (limited to 'OvmfPkg/OvmfPkg.dec')
| -rw-r--r-- | OvmfPkg/OvmfPkg.dec | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/OvmfPkg/OvmfPkg.dec b/OvmfPkg/OvmfPkg.dec index 049f6edd05..47b0e69629 100644 --- a/OvmfPkg/OvmfPkg.dec +++ b/OvmfPkg/OvmfPkg.dec @@ -117,3 +117,13 @@ gUefiOvmfPkgTokenSpaceGuid.PcdSecureBootEnable|FALSE|BOOLEAN|3
gUefiOvmfPkgTokenSpaceGuid.PcdQemuBootOrderPciTranslation|TRUE|BOOLEAN|0x1c
gUefiOvmfPkgTokenSpaceGuid.PcdQemuBootOrderMmioTranslation|FALSE|BOOLEAN|0x1d
+
+ ## This feature flag enables SMM/SMRAM support. Note that it also requires
+ # such support from the underlying QEMU instance; if that support is not
+ # present, the firmware will reject continuing after a certain point.
+ #
+ # The flag also acts as a general "security switch"; when TRUE, many
+ # components will change behavior, with the goal of preventing a malicious
+ # runtime OS from tampering with firmware structures (special memory ranges
+ # used by OVMF, the varstore pflash chip, LockBox etc).
+ gUefiOvmfPkgTokenSpaceGuid.PcdSmmSmramRequire|FALSE|BOOLEAN|0x1e
|