libreboot
/
lbwww
1
0
Fork 0
Code Packages Projects Releases Activity

Update freedom-status relative to HP laptops 

EC firmware now documented, handled on HP laptops
that were recently added by Riku.
hslick-master
Leah Rowe 2023-04-23 01:30:02 +01:00
parent 06fca5bc4f
commit 976cbd8a9d
3 changed files with 26 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
site/docs/maintain/index.md
View File

@ -284,10 +284,7 @@ blobs like Intel ME *scrubbed*, where the user is expected to insert them).
You can read more about this on the page: [Inserting binary blobs
on Sandybridge/Ivybridge/Haswell](../install/ivy_has_common.md)
NOTE: This utility may be expanded in future Libreboot revisions, to handle
things such as EC firmware, and it may expand to other platforms. It is, at
present, only utilised for handling ROM images on Intel Sandybridge, Ivybridge
and Haswell platforms.
KBC1126 EC firmware for HP laptops is *also* handled by blobutil.
build
=====

13
site/freedom-status.md
View File

@ -333,7 +333,18 @@ Intel/x86
Neutered ME required on these targets: `t420_8mb`, `t420s_8mb`, `t430_12mb`,
`t440p_12mb`, `t440pmrc_12mb`, `t520_8mb`, `t530_12mb`, `w530_12mb`,
`w541_12mb`, `w541mrc_12mb`, `x220_8mb`, `x230_12mb`, `x230_16mb`,
`x230edp_12mb`, `x230t_12mb`, `x230t_16mb` and `hp8200sff`.
`x230edp_12mb`, `x230t_12mb`, `x230t_16mb`, `hp8200sff`, `hp2560p_8mb`
and `hp9470m_16mb`.
KBC1126 EC firmware on `hp9470m_16mb` and `hp9470m_16mb` - on HP laptops, EC
firmware is inserted into main boot flash, rather than being on a separate IC.
This is *better* because libre replacements would be more easy to install in
the future, and reverse engineering is made much easier by it. Libreboot's
build system handles such firmware in `blobutil`, automatically downloading
it during the build process - releases after Libreboot 20230413, which lacks
such EC integration for HPs, will scrub EC firmware and provide functionality
in `blobutil` insert, to insert them with `cbfstool` at the correct offset as
defined by coreboot config for each board.
As stated, Libreboot provides this in a state where the ME is no longer a
threat to security. It initialises itself, but then does nothing, so it's

14
site/freedom-status.uk.md
View File

@ -333,7 +333,19 @@ Intel/x86
Нейтралізований ME потрібен на цих цілях: `t420_8mb`, `t420s_8mb`, `t430_12mb`,
`t440p_12mb`, `t440pmrc_12mb`, `t520_8mb`, `t530_12mb`, `w530_12mb`,
`w541_12mb`, `w541mrc_12mb`, `x220_8mb`, `x230_12mb`, `x230_16mb`,
`x230edp_12mb`, `x230t_12mb`, `x230t_16mb` та `hp8200sff_8mb`.
`x230edp_12mb`, `x230t_12mb`, `x230t_16mb`, `hp8200sff_8mb`, `hp2560p_8mb`
та `hp9470m_16mb`.
KBC1126 EC firmware on `hp9470m_16mb` and `hp9470m_16mb` - on HP laptops, EC
firmware is inserted into main boot flash, rather than being on a separate IC.
This is *better* because libre replacements would be more easy to install in
the future, and reverse engineering is made much easier by it. Libreboot's
build system handles such firmware in `blobutil`, automatically downloading
it during the build process - releases after Libreboot 20230413, which lacks
such EC integration for HPs, will scrub EC firmware and provide functionality
in `blobutil` insert, to insert them with `cbfstool` at the correct offset as
defined by coreboot config for each board. - **TODO: English paragraph that
needs to be translated into Ukrainian.**
Як заявлено, Libreboot надає це в стані, де ME більше не є
загрозою для безпеки. Він ініціалізує себе, але потім нічого не робить, тому його