blob: a0f1d3a1a101c8574c0e7123f9547ba5ebdce374 [file] [log] [blame]
# Copyright 2018 The Chromium OS Authors. All rights reserved.
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
# All kernel command line changes must update the security base lines in
# the signer. It rejects any settings it does not recognize and breaks the
# build. So any modify_kernel_command_line() function change here needs to be
# reflected in ensure_secure_kernelparams.config.
# See as an example.
modify_kernel_command_line() {
# Enable S0ix validation check in kernel
echo "intel_idle.slp_s0_check=1" >> "$1"
# Setup S0ix validation initial timeout for slp_s0_check
echo "intel_idle.slp_s0_seed=5" >> "$1"
# Enable S0ix logging using GSMI
echo "gsmi.s0ix_logging_enable=1" >> "$1"
# Might be helpful to preserve ramoops in extreme circumstances
echo "ramoops.ecc=1" >> "$1"
# Don't disable the ability to run VMs.
echo "disablevmx=off" >> "$1"
# Don't use USB 3.0 LPM for 0x2cb7:0x0007
echo "usbcore.quirks=2cb7:0007:k" >> "$1"