soc/intel/apollolake: Lock down Global SMI
Enable SMI_LOCK bit to prevent writes to the Global SMI Enable bit.
Signed-off-by: Sean Rhodes <sean@starlabs.systems>
Change-Id: I9377c3b65aa342f754c303148b0b8d826d05bb94
Reviewed-on: https://review.coreboot.org/c/coreboot/+/67662
Reviewed-by: Angel Pons <th3fanbus@gmail.com>
Tested-by: build bot (Jenkins) <no-reply@coreboot.org>
diff --git a/src/soc/intel/apollolake/lockdown.c b/src/soc/intel/apollolake/lockdown.c
index 1b7381d..e11778b 100644
--- a/src/soc/intel/apollolake/lockdown.c
+++ b/src/soc/intel/apollolake/lockdown.c
@@ -6,10 +6,17 @@
#include <intelpch/lockdown.h>
#include <soc/pm.h>
+static void pmc_lock_smi(void)
+{
+ uint8_t *pmcbase;
+
+ pmcbase = pmc_mmio_regs();
+
+ setbits32(pmcbase + GEN_PMCON2, SMI_LOCK);
+}
+
void soc_lockdown_config(int chipset_lockdown)
{
- /*
- * Nothing to do here as pmc_global_reset_disable_and_lock
- * is called from chip.c
- */
+ /* APL only supports CHIPSET_LOCKDOWN_COREBOOT */
+ pmc_lock_smi();
}