From mboxrd@z Thu Jan 1 00:00:00 1970 From: Tom Rini Date: Fri, 29 Jul 2016 09:31:33 -0400 Subject: [U-Boot] Disable command at runtime In-Reply-To: <1f085e1d-378c-5f29-2f35-988b8d110da8@elnico.cz> References: <1f085e1d-378c-5f29-2f35-988b8d110da8@elnico.cz> Message-ID: <20160729133133.GL17970@bill-the-cat> List-Id: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: u-boot@lists.denx.de On Thu, Jul 28, 2016 at 04:40:29AM -0700, kubiznak.petr wrote: > Hello, > > I wonder whether it is possible to dynamically enable/disable a command. > Since u-boot does not provide any secure authentication method, it is > dangerous to keep some commands available to a potential hacker. E.g. > the "fuse" command. On the other hand, I need these commands during the > manufacturing process. So my idea is to enable/disable the commands > dynamically based on some obscure logic. Is there a way to do it without > need to deeply hack the code? Well, there's a few ways to do this. The first way would simply be to install a different build of U-Boot onto the board than the one used during flashing as part of the manufacturing process. -- Tom -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 819 bytes Desc: Digital signature URL: