I am going to extend the opportunity for feedback to the end of Tuesday. I would very much like more community input on this proposal.

Of course - here are a couple of rough drafts: Option 1: https://github.com/TaylorBeebe/edk2/tree/memory_protection_lib_2 Option 2: https://github.com/TaylorBeebe/edk2/tree/memory_protection_lib

Thanks for your feedback, Jian. In option 2, a most basic implementation would returning the current FixedAtBuild PCDs assuming they are kept. If they aren't, the library implementer could simply hard

Note: I'll be accepting feedback on this until Friday after which I will submit a patch series.

Current memory protection settings rely on FixedAtBuild PCD values (minus PcdSetNxForStack). Because of this, the memory protection configuration interface is fixed in nature. Cases arise in which mem