From mboxrd@z Thu Jan 1 00:00:00 1970 From: Tom Rini Date: Mon, 15 May 2017 14:04:35 -0400 Subject: [U-Boot] [PATCH 20/47] Convert CONFIG_CMD_ESBC_VALIDATE to Kconfig In-Reply-To: <20170515105802.23023-21-sjg@chromium.org> References: <20170515105802.23023-1-sjg@chromium.org> <20170515105802.23023-21-sjg@chromium.org> Message-ID: <20170515180435.GW5701@bill-the-cat> List-Id: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: u-boot@lists.denx.de On Mon, May 15, 2017 at 04:57:35AM -0600, Simon Glass wrote: > This converts the following to Kconfig: > CONFIG_CMD_ESBC_VALIDATE > > Signed-off-by: Simon Glass > --- > > arch/arm/include/asm/fsl_secure_boot.h | 1 - > arch/powerpc/include/asm/fsl_secure_boot.h | 1 - > board/freescale/common/Kconfig | 8 ++++++++ [snip] > diff --git a/board/freescale/common/Kconfig b/board/freescale/common/Kconfig > index 8a9a9be8ce..ac86ccea47 100644 > --- a/board/freescale/common/Kconfig > +++ b/board/freescale/common/Kconfig > @@ -4,3 +4,11 @@ config CHAIN_OF_TRUST > select FSL_CAAM > bool > default y > + > +config CMD_ESBC_VALIDATE > + bool "Enable the 'esbc_validate' and 'esbc_halt' commands" > + help > + This option enables two commands used for secure booting: > + > + esbc_validate - validate signature using RSA verification > + esbc_halt - put the core in spin loop (Secure Boot Only) This should be default y if CHAIN_OF_TRUST then the defconfig changes go away. This or similar is something I've been doing whenever an option is defined under the fsl_secure_boot.h headers. -- Tom -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 819 bytes Desc: Digital signature URL: