Set BIOS LOCK | Patchew

[edk2] [Patch][edk2-platforms/devel-IntelAtomProcessorE3900] Set BIOS LOCK

Posted by Guo, Mang 5 years, 10 months ago

Set BIOS LOCK default value from 'disable' to 'enable' to meet security requirement.

Cc: zwei4 <david.wei@intel.com>
Contributed-under: TianoCore Contribution Agreement 1.1
Signed-off-by: Guo Mang <mang.guo@intel.com>
---
 .../Common/PlatformSettings/PlatformSetupDxe/SouthClusterConfig.vfi | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/Platform/BroxtonPlatformPkg/Common/PlatformSettings/PlatformSetupDxe/SouthClusterConfig.vfi b/Platform/BroxtonPlatformPkg/Common/PlatformSettings/PlatformSetupDxe/SouthClusterConfig.vfi
index c6e9410..9d2c978 100644
--- a/Platform/BroxtonPlatformPkg/Common/PlatformSettings/PlatformSetupDxe/SouthClusterConfig.vfi
+++ b/Platform/BroxtonPlatformPkg/Common/PlatformSettings/PlatformSetupDxe/SouthClusterConfig.vfi
@@ -1,7 +1,7 @@
 // /** @file
 //  South Cluster Setup formset.
 //
-//  Copyright (c) 1999 - 2017, Intel Corporation. All rights reserved.<BR>
+//  Copyright (c) 1999 - 2018, Intel Corporation. All rights reserved.<BR>
 //
 //  This program and the accompanying materials
 //  are licensed and made available under the terms and conditions of the BSD License
@@ -138,8 +138,8 @@ form formid     = MISC_OPTIONS_FORM_ID,
   oneof varid  = Setup.ScBiosLock,
     prompt   = STRING_TOKEN(STR_PCH_BLE_PROMPT),
     help     = STRING_TOKEN(STR_PCH_BLE_HELP),
-    option text = STRING_TOKEN(STR_DISABLE), value = 0, flags = DEFAULT | MANUFACTURING | RESET_REQUIRED;
-    option text = STRING_TOKEN(STR_ENABLE), value = 1, flags = RESET_REQUIRED;
+    option text = STRING_TOKEN(STR_DISABLE), value = 0, flags = RESET_REQUIRED;
+    option text = STRING_TOKEN(STR_ENABLE), value = 1, flags = DEFAULT | MANUFACTURING | RESET_REQUIRED;
   endoneof;
   oneof varid  = Setup.RtcLock,
     prompt   = STRING_TOKEN(STR_PCH_RTC_LOCK_PROMPT),
-- 
2.10.1.windows.1

_______________________________________________
edk2-devel mailing list
edk2-devel@lists.01.org
https://lists.01.org/mailman/listinfo/edk2-devel

Re: [edk2] [Patch][edk2-platforms/devel-IntelAtomProcessorE3900] Set BIOS LOCK

Posted by Wei, David 5 years, 10 months ago

Reviewed-by: david.wei@intel.com

Thanks,
David  Wei

Intel SSG/STO/UEFI BIOS                                 

-----Original Message-----
From: Guo, Mang 
Sent: Friday, June 22, 2018 11:22 AM
To: edk2-devel@lists.01.org
Cc: Wei, David <david.wei@intel.com>
Subject: [Patch][edk2-platforms/devel-IntelAtomProcessorE3900] Set BIOS LOCK

Set BIOS LOCK default value from 'disable' to 'enable' to meet security requirement.

Cc: zwei4 <david.wei@intel.com>
Contributed-under: TianoCore Contribution Agreement 1.1
Signed-off-by: Guo Mang <mang.guo@intel.com>
---
 .../Common/PlatformSettings/PlatformSetupDxe/SouthClusterConfig.vfi | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/Platform/BroxtonPlatformPkg/Common/PlatformSettings/PlatformSetupDxe/SouthClusterConfig.vfi b/Platform/BroxtonPlatformPkg/Common/PlatformSettings/PlatformSetupDxe/SouthClusterConfig.vfi
index c6e9410..9d2c978 100644
--- a/Platform/BroxtonPlatformPkg/Common/PlatformSettings/PlatformSetupDxe/SouthClusterConfig.vfi
+++ b/Platform/BroxtonPlatformPkg/Common/PlatformSettings/PlatformSetupDxe/SouthClusterConfig.vfi
@@ -1,7 +1,7 @@
 // /** @file
 //  South Cluster Setup formset.
 //
-//  Copyright (c) 1999 - 2017, Intel Corporation. All rights reserved.<BR>
+//  Copyright (c) 1999 - 2018, Intel Corporation. All rights reserved.<BR>
 //
 //  This program and the accompanying materials
 //  are licensed and made available under the terms and conditions of the BSD License
@@ -138,8 +138,8 @@ form formid     = MISC_OPTIONS_FORM_ID,
   oneof varid  = Setup.ScBiosLock,
     prompt   = STRING_TOKEN(STR_PCH_BLE_PROMPT),
     help     = STRING_TOKEN(STR_PCH_BLE_HELP),
-    option text = STRING_TOKEN(STR_DISABLE), value = 0, flags = DEFAULT | MANUFACTURING | RESET_REQUIRED;
-    option text = STRING_TOKEN(STR_ENABLE), value = 1, flags = RESET_REQUIRED;
+    option text = STRING_TOKEN(STR_DISABLE), value = 0, flags = RESET_REQUIRED;
+    option text = STRING_TOKEN(STR_ENABLE), value = 1, flags = DEFAULT | MANUFACTURING | RESET_REQUIRED;
   endoneof;
   oneof varid  = Setup.RtcLock,
     prompt   = STRING_TOKEN(STR_PCH_RTC_LOCK_PROMPT),
-- 
2.10.1.windows.1

_______________________________________________
edk2-devel mailing list
edk2-devel@lists.01.org
https://lists.01.org/mailman/listinfo/edk2-devel