I have some questions for the feature.
Take OVMF as an example, can a platform enforce the memory protection setting
*at build time*? Or will every configuration come from *runtime*, such as QEMU
Config? What is the current default behavior?
In case of configuration from QEMU runtime, a malicio
Reference: https://github.com/tianocore/edk2/pull/4895
v5:
- Add a GrubCompat profile to SetMemoryProtectionsLib for compatibliity
with older grub versions. This profile is now the default for ArmVirtPkg
and OvmfPkg.
-Add a FixedAtBuild PCD to ArmVirtPkg which is used to determine the memory
prot