models: Enable coreboot measured boot

All the laptops contain a TPM 2.0 chip. Enable the measured boot
security feature by default.

Link: https://doc.coreboot.org/security/vboot/measured_boot.html
Signed-off-by: Tim Crawford <tcrawford@system76.com>
This commit is contained in:
Tim Crawford
2021-12-21 10:32:37 -07:00
committed by Tim Crawford
parent 8c88ca0252
commit 8d9fbd1e3c
25 changed files with 25 additions and 0 deletions

View File

@@ -15,6 +15,7 @@ CONFIG_POST_IO=n
CONFIG_RUN_FSP_GOP=y
CONFIG_SMMSTORE=y
CONFIG_SMMSTORE_V2=y
CONFIG_TPM_MEASURED_BOOT=y
CONFIG_USE_OPTION_TABLE=y
CONFIG_VALIDATE_INTEL_DESCRIPTOR=y
#CONFIG_CONSOLE_SYSTEM76_EC=y