blob: 98e7589d8fb0a56491f7044f8bcb44d5f1146e1a [file] [log] [blame]
Deepak Kodihalli4b271e12017-05-13 09:57:52 -05001description: >
2 Implement to specify a restricted mode of operation.
3
4properties:
5 - name: RestrictionMode
6 type: enum[self.Modes]
7 description: >
8 The restriction mode.
9
10enumerations:
11 - name: Modes
12 description: >
Patrick Williams8da396c2022-03-14 14:21:02 -050013 Possible modes of restriction.
Deepak Kodihalli4b271e12017-05-13 09:57:52 -050014 values:
Patrick Williams8da396c2022-03-14 14:21:02 -050015 - name: None
16 description: >
17 No restriction.
18 - name: Whitelist
19 description: >
20 Allow, only if in the whitelist.
21 - name: Blacklist
22 description: >
23 Prevent, if in the blacklist.
24 - name: Provisioning
25 description: >
Patrick Williamsa1347412022-12-06 10:56:22 -060026 Indicate that system is in provisioning mode and all commands
27 are allowed in system interface in both pre and post BIOS boot.
Patrick Williams8da396c2022-03-14 14:21:02 -050028 - name: ProvisionedHostWhitelist
29 description: >
Patrick Williamsa1347412022-12-06 10:56:22 -060030 Commands in the whitelist will only be executed through system
31 interface after BIOS POST complete. All KCS commands are
32 supported before POST complete.
Patrick Williams8da396c2022-03-14 14:21:02 -050033 - name: ProvisionedHostDisabled
34 description: >
Patrick Williamsa1347412022-12-06 10:56:22 -060035 Commands through system interface are executed only till BIOS
36 POST complete notification, after which system interface
37 commands are blocked (except BIOS SMI based ones).