diff options
| author | Jiewen Yao <jiewen.yao@intel.com> | 2017-02-06 07:32:54 -0800 |
|---|---|---|
| committer | Jiewen Yao <jiewen.yao@intel.com> | 2017-02-22 14:07:03 +0800 |
| commit | 861cc65656dfd5c8b340e890114651b7d3506471 (patch) | |
| tree | 90a0a127a344c7e7eeec81e6fad86b1a11434fb2 /MdeModulePkg/MdeModulePkg.dec | |
| parent | 22292ed344b8512c838bdd162533198b51a51c0c (diff) | |
| download | edk2-861cc65656dfd5c8b340e890114651b7d3506471.zip edk2-861cc65656dfd5c8b340e890114651b7d3506471.tar.gz edk2-861cc65656dfd5c8b340e890114651b7d3506471.tar.bz2 | |
MdeModulePkg/dec: add PcdImageProtectionPolicy.
Add PCD for image protection policy.
Cc: Star Zeng <star.zeng@intel.com>
Cc: Feng Tian <feng.tian@intel.com>
Cc: Michael Kinney <michael.d.kinney@intel.com>
Contributed-under: TianoCore Contribution Agreement 1.0
Signed-off-by: Jiewen Yao <jiewen.yao@intel.com>
Reviewed-by: Jeff Fan <jeff.fan@intel.com>
Tested-by: Ard Biesheuvel <ard.biesheuvel@linaro.org>
Diffstat (limited to 'MdeModulePkg/MdeModulePkg.dec')
| -rw-r--r-- | MdeModulePkg/MdeModulePkg.dec | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/MdeModulePkg/MdeModulePkg.dec b/MdeModulePkg/MdeModulePkg.dec index c95633c..9b7fb63 100644 --- a/MdeModulePkg/MdeModulePkg.dec +++ b/MdeModulePkg/MdeModulePkg.dec @@ -1088,6 +1088,16 @@ # @Prompt Memory profile driver path.
gEfiMdeModulePkgTokenSpaceGuid.PcdMemoryProfileDriverPath|{0x0}|VOID*|0x00001043
+ ## Set image protection policy. The policy is bitwise.
+ # If a bit is set, the image will be protected by DxeCore if it is aligned.
+ # The code section becomes read-only, and the data section becomes non-executable.
+ # If a bit is clear, the image will not be protected.<BR><BR>
+ # BIT0 - Image from unknown device. <BR>
+ # BIT1 - Image from firmware volume.<BR>
+ # @Prompt Set image protection policy.
+ # @ValidRange 0x80000002 | 0x00000000 - 0x0000001F
+ gEfiMdeModulePkgTokenSpaceGuid.PcdImageProtectionPolicy|0x00000002|UINT32|0x00001047
+
## PCI Serial Device Info. It is an array of Device, Function, and Power Management
# information that describes the path that contains zero or more PCI to PCI briges
# followed by a PCI serial device. Each array entry is 4-bytes in length. The
|