lockmsrs

Documentation

Overview

lockmsrs locks important intel MSRs.

All MSRs are specified in the Intel Software developer's manual. This seems like a good set of bits to lock down when booting through NERF/LINUXBOOT to some other OS. When locked, these MSRs generally prevent further modifications until reset.