A simple question about the me_cleaner

[JD The Bomb (Extreme)]

Is the me_cleaner essentially disabling the CFG lock?

[Daniel Maslowski]

Not that I am aware of, though also note that it's an old Python script that hasn't seen much maintenance (last upstream commit 7 years ago, various copies exist) and only supports some older chipsets. There is a dedicated wiki for it:

https://github.com/corna/me_cleaner/wiki/How-does-it-work

Though I'm not sure what exactly CFG lock would mean in this case. Could you explain it?

Btw I have some other utilities in the making, but I don't have that much time for that myself, unfortunately. They are all around Intel, including IFD, FIT, ME file systems, and other ME data structures used for bootup such as pointers to manifests etc.. That is also what me_cleaner touches.

See https://github.com/fiedka/me_fs_rs and https://github.com/fiedka/romulan (mind respectively some WIP in branches).

[Daniel Maslowski]

Happy to announce that I'm working on modernized Intel firmware toolig under an OSFF grant, I am starting with a rework of what me_cleaner does:

https://github.com/platform-system-interface/intel_fw

I am currently taking a closer look at what me_cleaner as of its latest commit is doing, and what people suggested through PRs - which quite doubles the feature set.

There are attempts to support newer platforms, with certain drawbacks (as expected) since the ME is a core part of the platform design and boot process. E.g., it would break S0iX.

Feel free to create issues to this new repo.