blob: c4f3bdd68f5e0e6c1e07406343269f96d7bf5a10 [file] [log] [blame]
/* SPDX-License-Identifier: GPL-2.0-only */
#include <security/intel/txt/txt.h>
#include <stdbool.h>
#include "memory.h"
/**
* To be called after DRAM init.
* Tells the caller if DRAM must be cleared as requested by the user,
* firmware or security framework.
*/
bool security_clear_dram_request(void)
{
if (CONFIG(SECURITY_CLEAR_DRAM_ON_REGULAR_BOOT))
return true;
if (CONFIG(INTEL_TXT) && intel_txt_memory_has_secrets())
return true;
/* TODO: Add TEE environments here */
return false;
}