From d8f2fa208c025b8579d68f69d7dfb322f5f8bbbb Mon Sep 17 00:00:00 2001
From: Gerd Hoffmann <kraxel@redhat.com>
Date: Fri, 22 Dec 2023 11:32:14 +0100
Subject: [PATCH] set PcdImageProtectionPolicy = 0x03 for strict nx builds

---
 edk2-build.fedora | 1 +
 1 file changed, 1 insertion(+)

diff --git a/edk2-build.fedora b/edk2-build.fedora
index 0bf1276..531d810 100644
--- a/edk2-build.fedora
+++ b/edk2-build.fedora
@@ -47,6 +47,7 @@ TPM2_CONFIG_ENABLE       = FALSE
 
 [pcds.nx.strict]
 PcdDxeNxMemoryProtectionPolicy = 0xC000000000007FD5
+PcdImageProtectionPolicy       = 0x03
 # Default is FALSE, so there no need to actually set it.
 #PcdUninstallMemAttrProtocol    = FALSE