tree 8e5d32288f9e725b79aa1112f487e5300806fcc5
parent 13bb84dc4a8eee75c0dfd79916e073f93e45cf81
author Joel Stanley <joel@jms.id.au> 1652084523 +0930
committer Joel Stanley <joel@jms.id.au> 1652135823 +0000

u-boot-aspeed: Disable backdoor interfaces

This is a version of the CVE-2019-6260 "pantsdown" mitigations for the
v2019.04 u-boot branch. The SuperIO and debug UART backdoors can be
optionally enabled through u-boot build time configuration, but default
to disabled as long as your machine uses the common board_init.

These changes are relevant for the AST2400 and the AST2500 only.

If your machine relies on these features to boot, look at the options in
this patch:

 https://lore.kernel.org/openbmc/20220504004739.15829-1-zev@bewilderbeest.net/

See this email for instructions on how to test:

 https://lore.kernel.org/openbmc/CACPK8XfYuWT9Q5G_bo9AGugx-DcODDZ8xb39Sr+Sa8qWqVeW6A@mail.gmail.com/

Thank you to Zev for the work on this patch.

Zev Weiss (1):
      aspeed: Disable backdoor interfaces

Change-Id: I4ebeae13047b8c32f2d9324d4ef9c6f98c6f4a60
Signed-off-by: Joel Stanley <joel@jms.id.au>