Update freedom-status relative to HP laptops

EC firmware now documented, handled on HP laptops
that were recently added by Riku.
hslick-master
Leah Rowe 2023-04-23 01:30:02 +01:00
parent 06fca5bc4f
commit 976cbd8a9d
3 changed files with 26 additions and 6 deletions

View File

@ -284,10 +284,7 @@ blobs like Intel ME *scrubbed*, where the user is expected to insert them).
You can read more about this on the page: [Inserting binary blobs You can read more about this on the page: [Inserting binary blobs
on Sandybridge/Ivybridge/Haswell](../install/ivy_has_common.md) on Sandybridge/Ivybridge/Haswell](../install/ivy_has_common.md)
NOTE: This utility may be expanded in future Libreboot revisions, to handle KBC1126 EC firmware for HP laptops is *also* handled by blobutil.
things such as EC firmware, and it may expand to other platforms. It is, at
present, only utilised for handling ROM images on Intel Sandybridge, Ivybridge
and Haswell platforms.
build build
===== =====

View File

@ -333,7 +333,18 @@ Intel/x86
Neutered ME required on these targets: `t420_8mb`, `t420s_8mb`, `t430_12mb`, Neutered ME required on these targets: `t420_8mb`, `t420s_8mb`, `t430_12mb`,
`t440p_12mb`, `t440pmrc_12mb`, `t520_8mb`, `t530_12mb`, `w530_12mb`, `t440p_12mb`, `t440pmrc_12mb`, `t520_8mb`, `t530_12mb`, `w530_12mb`,
`w541_12mb`, `w541mrc_12mb`, `x220_8mb`, `x230_12mb`, `x230_16mb`, `w541_12mb`, `w541mrc_12mb`, `x220_8mb`, `x230_12mb`, `x230_16mb`,
`x230edp_12mb`, `x230t_12mb`, `x230t_16mb` and `hp8200sff`. `x230edp_12mb`, `x230t_12mb`, `x230t_16mb`, `hp8200sff`, `hp2560p_8mb`
and `hp9470m_16mb`.
KBC1126 EC firmware on `hp9470m_16mb` and `hp9470m_16mb` - on HP laptops, EC
firmware is inserted into main boot flash, rather than being on a separate IC.
This is *better* because libre replacements would be more easy to install in
the future, and reverse engineering is made much easier by it. Libreboot's
build system handles such firmware in `blobutil`, automatically downloading
it during the build process - releases after Libreboot 20230413, which lacks
such EC integration for HPs, will scrub EC firmware and provide functionality
in `blobutil` insert, to insert them with `cbfstool` at the correct offset as
defined by coreboot config for each board.
As stated, Libreboot provides this in a state where the ME is no longer a As stated, Libreboot provides this in a state where the ME is no longer a
threat to security. It initialises itself, but then does nothing, so it's threat to security. It initialises itself, but then does nothing, so it's

View File

@ -333,7 +333,19 @@ Intel/x86
Нейтралізований ME потрібен на цих цілях: `t420_8mb`, `t420s_8mb`, `t430_12mb`, Нейтралізований ME потрібен на цих цілях: `t420_8mb`, `t420s_8mb`, `t430_12mb`,
`t440p_12mb`, `t440pmrc_12mb`, `t520_8mb`, `t530_12mb`, `w530_12mb`, `t440p_12mb`, `t440pmrc_12mb`, `t520_8mb`, `t530_12mb`, `w530_12mb`,
`w541_12mb`, `w541mrc_12mb`, `x220_8mb`, `x230_12mb`, `x230_16mb`, `w541_12mb`, `w541mrc_12mb`, `x220_8mb`, `x230_12mb`, `x230_16mb`,
`x230edp_12mb`, `x230t_12mb`, `x230t_16mb` та `hp8200sff_8mb`. `x230edp_12mb`, `x230t_12mb`, `x230t_16mb`, `hp8200sff_8mb`, `hp2560p_8mb`
та `hp9470m_16mb`.
KBC1126 EC firmware on `hp9470m_16mb` and `hp9470m_16mb` - on HP laptops, EC
firmware is inserted into main boot flash, rather than being on a separate IC.
This is *better* because libre replacements would be more easy to install in
the future, and reverse engineering is made much easier by it. Libreboot's
build system handles such firmware in `blobutil`, automatically downloading
it during the build process - releases after Libreboot 20230413, which lacks
such EC integration for HPs, will scrub EC firmware and provide functionality
in `blobutil` insert, to insert them with `cbfstool` at the correct offset as
defined by coreboot config for each board. - **TODO: English paragraph that
needs to be translated into Ukrainian.**
Як заявлено, Libreboot надає це в стані, де ME більше не є Як заявлено, Libreboot надає це в стані, де ME більше не є
загрозою для безпеки. Він ініціалізує себе, але потім нічого не робить, тому його загрозою для безпеки. Він ініціалізує себе, але потім нічого не робить, тому його