public inbox for u-boot@lists.denx.de
 help / color / mirror / Atom feed
* [PATCH 1/6] env: Convert CONFIG_DELAY_ENVIRONMENT to Kconfig
@ 2020-05-06 17:38 Ovidiu Panait
  2020-05-06 17:38 ` [PATCH 2/6] board_r: env: Use IS_ENABLED() instead of #ifdefs Ovidiu Panait
                   ` (5 more replies)
  0 siblings, 6 replies; 12+ messages in thread
From: Ovidiu Panait @ 2020-05-06 17:38 UTC (permalink / raw)
  To: u-boot

This converts ad-hoc CONFIG_DELAY_ENVIRONMENT to Kconfig.

Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com>
---
 env/Kconfig                  | 12 ++++++++++++
 scripts/config_whitelist.txt |  1 -
 2 files changed, 12 insertions(+), 1 deletion(-)

diff --git a/env/Kconfig b/env/Kconfig
index af63ac52f7..ed94e83ec1 100644
--- a/env/Kconfig
+++ b/env/Kconfig
@@ -592,6 +592,18 @@ config ENV_VARS_UBOOT_RUNTIME_CONFIG
 	  run-time determined information about the hardware to the
 	  environment.  These will be named board_name, board_rev.
 
+config DELAY_ENVIRONMENT
+	bool "Delay environment loading"
+	depends on !OF_CONTROL
+	help
+	  Enable this to inhibit loading the environment during board
+	  initialization. This can address the security risk of untrusted data
+	  being used during boot. Normally the environment is loaded when the
+	  board is initialised so that it is available to U-Boot. This inhibits
+	  that so that the environment is not available until explicitly loaded
+	  later by U-Boot code. With CONFIG_OF_CONTROL this is instead
+	  controlled by the value of /config/load-environment.
+
 if SPL_ENV_SUPPORT
 config SPL_ENV_IS_NOWHERE
 	bool "SPL Environment is not stored"
diff --git a/scripts/config_whitelist.txt b/scripts/config_whitelist.txt
index 19c9218060..bc086363ca 100644
--- a/scripts/config_whitelist.txt
+++ b/scripts/config_whitelist.txt
@@ -306,7 +306,6 @@ CONFIG_DEFAULT
 CONFIG_DEFAULT_CONSOLE
 CONFIG_DEFAULT_IMMR
 CONFIG_DEF_HWCONFIG
-CONFIG_DELAY_ENVIRONMENT
 CONFIG_DESIGNWARE_ETH
 CONFIG_DEVELOP
 CONFIG_DEVICE_TREE_LIST
-- 
2.17.1

^ permalink raw reply related	[flat|nested] 12+ messages in thread

end of thread, other threads:[~2020-05-16  1:46 UTC | newest]

Thread overview: 12+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2020-05-06 17:38 [PATCH 1/6] env: Convert CONFIG_DELAY_ENVIRONMENT to Kconfig Ovidiu Panait
2020-05-06 17:38 ` [PATCH 2/6] board_r: env: Use IS_ENABLED() instead of #ifdefs Ovidiu Panait
2020-05-16  1:45   ` Tom Rini
2020-05-06 17:38 ` [PATCH 3/6] board_r: Introduce CONFIG_PCI_INIT_R Kconfig option Ovidiu Panait
2020-05-16  1:45   ` Tom Rini
2020-05-06 17:38 ` [PATCH 4/6] qemu_arm64_defconfig: Enable CONFIG_PCI_INIT_R Ovidiu Panait
2020-05-16  1:45   ` Tom Rini
2020-05-06 17:38 ` [PATCH 5/6] qemu_arm_defconfig: " Ovidiu Panait
2020-05-16  1:46   ` Tom Rini
2020-05-06 17:38 ` [PATCH 6/6] qemu-x86*_defconfig: " Ovidiu Panait
2020-05-16  1:46   ` Tom Rini
2020-05-16  1:45 ` [PATCH 1/6] env: Convert CONFIG_DELAY_ENVIRONMENT to Kconfig Tom Rini

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox