Re: [edk2-devel] [PATCH v5 00/28] Implement Dynamic Memory Protection Settings

2023-10-09 Thread Yao, Jiewen
I have some questions for the feature. Take OVMF as an example, can a platform enforce the memory protection setting *at build time*? Or will every configuration come from *runtime*, such as QEMU Config? What is the current default behavior? In case of configuration from QEMU runtime, a malicio

[edk2-devel] [PATCH v5 00/28] Implement Dynamic Memory Protection Settings

2023-10-08 Thread Taylor Beebe
Reference: https://github.com/tianocore/edk2/pull/4895 v5: - Add a GrubCompat profile to SetMemoryProtectionsLib for compatibliity with older grub versions. This profile is now the default for ArmVirtPkg and OvmfPkg. -Add a FixedAtBuild PCD to ArmVirtPkg which is used to determine the memory prot