This project will no longer be maintained by Intel. Intel has ceased development and contributions including, but not limited to, maintenance, bug fixes, new releases, or updates, to this project. Intel no longer accepts patches to this project.
This component is used to manage the RestrictionMode property under U-Boot
environment variable using u-boot-env-mgr. This property determines the
filtering mechanism which will be applied while executig IPMI commands over
system interface.
BMC will restrict the execution of commands based on the following restriction modes
Provisioning- Allows all command execution through system interfaceProvisionedHostWhitelist- Only whitelist commands will be executed afterCoreBiosDonesignalProvisionedHostDisabled- No commands are allowed afterCoreBiosDonesignal
This component will expose the restriction modes through RestrictionMode
property under xyz.openbmc_project.Control.Security.RestrictionMode interface.
Also, a redfish event will be logged for any change in restriction mode.