Add optional EC security state and documentation

src/common/include/common/command.h

@@ -46,6 +46,10 @@ enum Command {
     CMD_LED_SAVE = 18,
     // Enable/disable no input mode
     CMD_SET_NO_INPUT = 19,
+    // Get security state
+    CMD_SECURITY_GET = 20,
+    // Set security state
+    CMD_SECURITY_SET = 21,
     //TODO
 };
 
@@ -70,4 +74,15 @@ enum CommandSpiFlag {
 
 #define CMD_LED_INDEX_ALL 0xFF
 
+enum SecurityState {
+    // Default value, flashing is prevented, cannot be set with CMD_SECURITY_SET
+    SECURITY_STATE_LOCK = 0,
+    // Flashing is allowed, cannot be set with CMD_SECURITY_SET
+    SECURITY_STATE_UNLOCK = 1,
+    // Flashing will be prevented on the next reboot
+    SECURITY_STATE_PREPARE_LOCK = 2,
+    // Flashing will be allowed on the next reboot
+    SECURITY_STATE_PREPARE_UNLOCK = 3,
+};
+
 #endif // _COMMON_COMMAND_H