fwupd/plugins/msr
Richard Hughes f56878ff88 Allow adding GUIDs to each HSI security attr
This indicates the GUID in some way contributed to the result decided.

It also allows us to match the submitted HSI results back to a firmware
stream on the LVFS, which allows us to allow vendors to see a subset of
results for uploaded devices.
2021-09-03 22:03:28 +01:00
..
fu-plugin-msr.c Allow adding GUIDs to each HSI security attr 2021-09-03 22:03:28 +01:00
fwupd-msr.conf msr: Add a new plugin to detect the Intel DCI state 2020-07-16 20:13:06 +01:00
meson.build Move the plugin build logic to the plugins themselves 2021-02-18 14:46:20 +00:00
msr.quirk Simplify the quirk file format 2021-03-03 08:30:34 +00:00
README.md trivial: update markdown for pre-commit style 2021-07-18 14:42:47 -05:00

MSR

Introduction

This plugin checks if the Model-specific registers (MSRs) indicate the Direct Connect Interface (DCI) is enabled.

DCI allows debugging of Intel processors using the USB3 port. DCI should always be disabled and locked on production hardware as it allows the attacker to disable other firmware protection methods.

The result will be stored in a security attribute for HSI.

External Interface Access

This plugin requires read access to /sys/class/msr.