]> git.proxmox.com Git - mirror_edk2.git/blobdiff - MdeModulePkg/MdeModulePkg.uni
SecurityPkg:AuthVariableLib:Implement ECR1707 for Private Auth Variable
[mirror_edk2.git] / MdeModulePkg / MdeModulePkg.uni
index 5436b60d6b6538c1ee26ad0a4c7ae71ef913389f..f8b31694ba81e7048a79cb08f08c6bb087f3738c 100644 (file)
 \r
 #string STR_gEfiMdeModulePkgTokenSpaceGuid_PcdTestKeyUsed_HELP  #language en-US "This dynamic PCD holds the information if there is any test key used by the platform."\r
 \r
+#string STR_gEfiMdeModulePkgTokenSpaceGuid_PcdSmiHandlerProfilePropertyMask_PROMPT  #language en-US "SmiHandlerProfile Property."\r
+\r
+#string STR_gEfiMdeModulePkgTokenSpaceGuid_PcdSmiHandlerProfilePropertyMask_HELP  #language en-US "The mask is used to control SmiHandlerProfile behavior.<BR><BR>\n"\r
+                                                                                                  "BIT0 - Enable SmiHandlerProfile.<BR>"\r
+\r
+#string STR_gEfiMdeModulePkgTokenSpaceGuid_PcdImageProtectionPolicy_PROMPT  #language en-US "Set image protection policy."\r
+\r
+#string STR_gEfiMdeModulePkgTokenSpaceGuid_PcdImageProtectionPolicy_HELP  #language en-US "Set image protection policy. The policy is bitwise.\n"\r
+                                                                                          "If a bit is set, the image will be protected by DxeCore if it is aligned.\n"\r
+                                                                                          "The code section becomes read-only, and the data section becomes non-executable.\n"\r
+                                                                                          "If a bit is clear, the image will not be protected.<BR><BR>\n"\r
+                                                                                          "BIT0       - Image from unknown device. <BR>\n"\r
+                                                                                          "BIT1       - Image from firmware volume.<BR>"\r
+\r
+#string STR_gEfiMdeModulePkgTokenSpaceGuid_PcdDxeNxMemoryProtectionPolicy_PROMPT  #language en-US "Set DXE memory protection policy."\r
+\r
+#string STR_gEfiMdeModulePkgTokenSpaceGuid_PcdDxeNxMemoryProtectionPolicy_HELP  #language en-US "Set DXE memory protection policy. The policy is bitwise.\n"\r
+                                                                                                "If a bit is set, memory regions of the associated type will be mapped\n"\r
+                                                                                                "non-executable.<BR><BR>\n"\r
+                                                                                                "\n"\r
+                                                                                                "Below is bit mask for this PCD: (Order is same as UEFI spec)<BR>\n"\r
+                                                                                                "EfiReservedMemoryType          0x0001<BR>\n"\r
+                                                                                                "EfiLoaderCode                  0x0002<BR>\n"\r
+                                                                                                "EfiLoaderData                  0x0004<BR>\n"\r
+                                                                                                "EfiBootServicesCode            0x0008<BR>\n"\r
+                                                                                                "EfiBootServicesData            0x0010<BR>\n"\r
+                                                                                                "EfiRuntimeServicesCode         0x0020<BR>\n"\r
+                                                                                                "EfiRuntimeServicesData         0x0040<BR>\n"\r
+                                                                                                "EfiConventionalMemory          0x0080<BR>\n"\r
+                                                                                                "EfiUnusableMemory              0x0100<BR>\n"\r
+                                                                                                "EfiACPIReclaimMemory           0x0200<BR>\n"\r
+                                                                                                "EfiACPIMemoryNVS               0x0400<BR>\n"\r
+                                                                                                "EfiMemoryMappedIO              0x0800<BR>\n"\r
+                                                                                                "EfiMemoryMappedIOPortSpace     0x1000<BR>\n"\r
+                                                                                                "EfiPalCode                     0x2000<BR>\n"\r
+                                                                                                "EfiPersistentMemory            0x4000<BR>\n"\r
+                                                                                                "OEM Reserved       0x4000000000000000<BR>\n"\r
+                                                                                                "OS Reserved        0x8000000000000000<BR>\n"\r
+                                                                                                "\n"\r
+                                                                                                "NOTE: User must NOT set NX protection for EfiLoaderCode / EfiBootServicesCode / EfiRuntimeServicesCode. <BR>\n"\r
+                                                                                                "User MUST set the same NX protection for EfiBootServicesData and EfiConventionalMemory. <BR>\n"\r
+                                                                                                "\n"\r
+                                                                                                "e.g. 0x7FD5 can be used for all memory except Code. <BR>\n"\r
+                                                                                                "e.g. 0x7BD4 can be used for all memory except Code and ACPINVS/Reserved. <BR>\n"\r
+                                                                                                ""\r
+\r
+#string STR_gEfiMdeModulePkgTokenSpaceGuid_PcdPteMemoryEncryptionAddressOrMask_PROMPT  #language en-US "The address mask when memory encryption is enabled."\r
+\r
+#string STR_gEfiMdeModulePkgTokenSpaceGuid_PcdPteMemoryEncryptionAddressOrMask_HELP  #language en-US "This PCD holds the address mask for page table entries when memory encryption is\n"\r
+                                                                                                     "enabled on AMD processors supporting the Secure Encrypted Virtualization (SEV) feature.\n"\r
+                                                                                                     "This mask should be applied when creating 1:1 virtual to physical mapping tables."\r
+\r
+#string STR_gEfiMdeModulePkgTokenSpaceGuid_PcdNullPointerDetectionPropertyMask_PROMPT  #language en-US "Enable NULL pointer detection"\r
+\r
+#string STR_gEfiMdeModulePkgTokenSpaceGuid_PcdNullPointerDetectionPropertyMask_HELP    #language en-US "Mask to control the NULL address detection in code for different phases.\n"\r
+                                                                                                       " If enabled, accessing NULL address in UEFI or SMM code can be caught.\n\n"\r
+                                                                                                       "   BIT0    - Enable NULL pointer detection for UEFI.\n"\r
+                                                                                                       "   BIT1    - Enable NULL pointer detection for SMM.\n"\r
+                                                                                                       "   BIT2..6 - Reserved for future uses.\n"\r
+                                                                                                       "   BIT7    - Disable NULL pointer detection just after EndOfDxe."\r
+                                                                                                       " This is a workaround for those unsolvable NULL access issues in"\r
+                                                                                                       " OptionROM, boot loader, etc. It can also help to avoid unnecessary"\r
+                                                                                                       " exception caused by legacy memory (0-4095) access after EndOfDxe,"\r
+                                                                                                       " such as Windows 7 boot on Qemu.\n"\r
+\r