On Thu, 7 May 2020 at 20:22, <Mario.Limonciello@xxxxxxxx> wrote: > By default the driver exposes SPI serial flash contents as read-only but it can > be changed from kernel command line, passing “intel-spi.writeable=1”. Ahh, that was the bit I didn't know; having the SPI as readonly by default is certainly a good idea, and probably sane enough to enable for Fedora/RHEL as you still need to "do" something manual to enable SPI writing. I guess I can add my securityfs additions to intel-spi-pci.c with Mikas approval. Richard