| Deepak Kodihalli | 4b271e1 | 2017-05-13 09:57:52 -0500 | [diff] [blame] | 1 | description: > |
| 2 | Implement to specify a restricted mode of operation. |
| 3 | |
| 4 | properties: |
| 5 | - name: RestrictionMode |
| 6 | type: enum[self.Modes] |
| 7 | description: > |
| 8 | The restriction mode. |
| 9 | |
| 10 | enumerations: |
| 11 | - name: Modes |
| 12 | description: > |
| Patrick Williams | 8da396c | 2022-03-14 14:21:02 -0500 | [diff] [blame^] | 13 | Possible modes of restriction. |
| Deepak Kodihalli | 4b271e1 | 2017-05-13 09:57:52 -0500 | [diff] [blame] | 14 | values: |
| Patrick Williams | 8da396c | 2022-03-14 14:21:02 -0500 | [diff] [blame^] | 15 | - name: None |
| 16 | description: > |
| 17 | No restriction. |
| 18 | - name: Whitelist |
| 19 | description: > |
| 20 | Allow, only if in the whitelist. |
| 21 | - name: Blacklist |
| 22 | description: > |
| 23 | Prevent, if in the blacklist. |
| 24 | - name: Provisioning |
| 25 | description: > |
| 26 | Indicate that system is in provisioning mode |
| 27 | and all commands are allowed in system interface |
| 28 | in both pre and post BIOS boot. |
| 29 | - name: ProvisionedHostWhitelist |
| 30 | description: > |
| 31 | Commands in the whitelist will only be executed |
| 32 | through system interface after BIOS POST complete. |
| 33 | All KCS commands are supported before POST complete. |
| 34 | - name: ProvisionedHostDisabled |
| 35 | description: > |
| 36 | Commands through system interface are executed only |
| 37 | till BIOS POST complete notification, after |
| 38 | which system interface commands are blocked (except BIOS SMI |
| 39 | based ones). |