Update freedom-status relative to HP laptops
EC firmware now documented, handled on HP laptops that were recently added by Riku.hslick-master
parent
06fca5bc4f
commit
976cbd8a9d
|
@ -284,10 +284,7 @@ blobs like Intel ME *scrubbed*, where the user is expected to insert them).
|
||||||
You can read more about this on the page: [Inserting binary blobs
|
You can read more about this on the page: [Inserting binary blobs
|
||||||
on Sandybridge/Ivybridge/Haswell](../install/ivy_has_common.md)
|
on Sandybridge/Ivybridge/Haswell](../install/ivy_has_common.md)
|
||||||
|
|
||||||
NOTE: This utility may be expanded in future Libreboot revisions, to handle
|
KBC1126 EC firmware for HP laptops is *also* handled by blobutil.
|
||||||
things such as EC firmware, and it may expand to other platforms. It is, at
|
|
||||||
present, only utilised for handling ROM images on Intel Sandybridge, Ivybridge
|
|
||||||
and Haswell platforms.
|
|
||||||
|
|
||||||
build
|
build
|
||||||
=====
|
=====
|
||||||
|
|
|
@ -333,7 +333,18 @@ Intel/x86
|
||||||
Neutered ME required on these targets: `t420_8mb`, `t420s_8mb`, `t430_12mb`,
|
Neutered ME required on these targets: `t420_8mb`, `t420s_8mb`, `t430_12mb`,
|
||||||
`t440p_12mb`, `t440pmrc_12mb`, `t520_8mb`, `t530_12mb`, `w530_12mb`,
|
`t440p_12mb`, `t440pmrc_12mb`, `t520_8mb`, `t530_12mb`, `w530_12mb`,
|
||||||
`w541_12mb`, `w541mrc_12mb`, `x220_8mb`, `x230_12mb`, `x230_16mb`,
|
`w541_12mb`, `w541mrc_12mb`, `x220_8mb`, `x230_12mb`, `x230_16mb`,
|
||||||
`x230edp_12mb`, `x230t_12mb`, `x230t_16mb` and `hp8200sff`.
|
`x230edp_12mb`, `x230t_12mb`, `x230t_16mb`, `hp8200sff`, `hp2560p_8mb`
|
||||||
|
and `hp9470m_16mb`.
|
||||||
|
|
||||||
|
KBC1126 EC firmware on `hp9470m_16mb` and `hp9470m_16mb` - on HP laptops, EC
|
||||||
|
firmware is inserted into main boot flash, rather than being on a separate IC.
|
||||||
|
This is *better* because libre replacements would be more easy to install in
|
||||||
|
the future, and reverse engineering is made much easier by it. Libreboot's
|
||||||
|
build system handles such firmware in `blobutil`, automatically downloading
|
||||||
|
it during the build process - releases after Libreboot 20230413, which lacks
|
||||||
|
such EC integration for HPs, will scrub EC firmware and provide functionality
|
||||||
|
in `blobutil` insert, to insert them with `cbfstool` at the correct offset as
|
||||||
|
defined by coreboot config for each board.
|
||||||
|
|
||||||
As stated, Libreboot provides this in a state where the ME is no longer a
|
As stated, Libreboot provides this in a state where the ME is no longer a
|
||||||
threat to security. It initialises itself, but then does nothing, so it's
|
threat to security. It initialises itself, but then does nothing, so it's
|
||||||
|
|
|
@ -333,7 +333,19 @@ Intel/x86
|
||||||
Нейтралізований ME потрібен на цих цілях: `t420_8mb`, `t420s_8mb`, `t430_12mb`,
|
Нейтралізований ME потрібен на цих цілях: `t420_8mb`, `t420s_8mb`, `t430_12mb`,
|
||||||
`t440p_12mb`, `t440pmrc_12mb`, `t520_8mb`, `t530_12mb`, `w530_12mb`,
|
`t440p_12mb`, `t440pmrc_12mb`, `t520_8mb`, `t530_12mb`, `w530_12mb`,
|
||||||
`w541_12mb`, `w541mrc_12mb`, `x220_8mb`, `x230_12mb`, `x230_16mb`,
|
`w541_12mb`, `w541mrc_12mb`, `x220_8mb`, `x230_12mb`, `x230_16mb`,
|
||||||
`x230edp_12mb`, `x230t_12mb`, `x230t_16mb` та `hp8200sff_8mb`.
|
`x230edp_12mb`, `x230t_12mb`, `x230t_16mb`, `hp8200sff_8mb`, `hp2560p_8mb`
|
||||||
|
та `hp9470m_16mb`.
|
||||||
|
|
||||||
|
KBC1126 EC firmware on `hp9470m_16mb` and `hp9470m_16mb` - on HP laptops, EC
|
||||||
|
firmware is inserted into main boot flash, rather than being on a separate IC.
|
||||||
|
This is *better* because libre replacements would be more easy to install in
|
||||||
|
the future, and reverse engineering is made much easier by it. Libreboot's
|
||||||
|
build system handles such firmware in `blobutil`, automatically downloading
|
||||||
|
it during the build process - releases after Libreboot 20230413, which lacks
|
||||||
|
such EC integration for HPs, will scrub EC firmware and provide functionality
|
||||||
|
in `blobutil` insert, to insert them with `cbfstool` at the correct offset as
|
||||||
|
defined by coreboot config for each board. - **TODO: English paragraph that
|
||||||
|
needs to be translated into Ukrainian.**
|
||||||
|
|
||||||
Як заявлено, Libreboot надає це в стані, де ME більше не є
|
Як заявлено, Libreboot надає це в стані, де ME більше не є
|
||||||
загрозою для безпеки. Він ініціалізує себе, але потім нічого не робить, тому його
|
загрозою для безпеки. Він ініціалізує себе, але потім нічого не робить, тому його
|
||||||
|
|
Loading…
Reference in New Issue