[U-Boot] [PATCH v4 09/10] ti_armv7_common: Disable Falcon Mode on HS devices

Lokesh Vutla
2016-08-31T03:29:49Z

On Wednesday 31 August 2016 12:36 AM, Andrew F. Davis wrote:
> Authentication of images in Falcon Mode is not supported. Do not enable
> SPL_OS_BOOT when TI_SECURE_DEVICE is enabled. This prevents attempting
> to directly load kernel images which will fail, for security reasons,
> on HS devices, the board is locked if a non-authenticatable image load
> is attempted, so we disable attempting Falcon Mode.
>
> Signed-off-by: Andrew F. Davis <afd@ti.com>
> Reviewed-by: Tom Rini <trini@konsulko.com>

Acked-by: Lokesh Vutla <lokeshvutla@ti.com>

Just make sure Falcon boot is supported eventually.

Thanks and regards,
Lokesh
> ---
> include/configs/ti_armv7_common.h | 15 ++++++++++-----
> 1 file changed, 10 insertions(+), 5 deletions(-)
>
> diff --git a/include/configs/ti_armv7_common.h b/include/configs/ti_armv7_common.h
> index 9f947ee..949b6d1 100644
> --- a/include/configs/ti_armv7_common.h
> +++ b/include/configs/ti_armv7_common.h
> @@ -198,16 +198,21 @@
>
> /*
> * Our platforms make use of SPL to initalize the hardware (primarily
> - * memory) enough for full U-Boot to be loaded. We also support Falcon
> - * Mode so that the Linux kernel can be booted directly from SPL
> - * instead, if desired. We make use of the general SPL framework found
> - * under common/spl/. Given our generally common memory map, we set a
> - * number of related defaults and sizes here.
> + * memory) enough for full U-Boot to be loaded. We make use of the general
> + * SPL framework found under common/spl/. Given our generally common memory
> + * map, we set a number of related defaults and sizes here.
> */
> #if !defined(CONFIG_NOR_BOOT) && \
> !(defined(CONFIG_QSPI_BOOT) && defined(CONFIG_AM43XX))
> #define CONFIG_SPL_FRAMEWORK
> +
> +/*
> + * We also support Falcon Mode so that the Linux kernel can be booted
> + * directly from SPL. This is not currently available on HS devices.
> + */
> +#if !defined(CONFIG_TI_SECURE_DEVICE)
> #define CONFIG_SPL_OS_BOOT
> +#endif
>
> /*
> * Place the image at the start of the ROM defined image space (per
>