[U-Boot] [PATCH 20/47] Convert CONFIG_CMD_ESBC_VALIDATE to Kconfig

Tom Rini
2017-05-15T18:04:35Z

On Mon, May 15, 2017 at 04:57:35AM -0600, Simon Glass wrote:

> This converts the following to Kconfig:
> CONFIG_CMD_ESBC_VALIDATE
>
> Signed-off-by: Simon Glass <sjg@chromium.org>
> ---
>
> arch/arm/include/asm/fsl_secure_boot.h | 1 -
> arch/powerpc/include/asm/fsl_secure_boot.h | 1 -
> board/freescale/common/Kconfig | 8 ++++++++
[snip]
> diff --git a/board/freescale/common/Kconfig b/board/freescale/common/Kconfig
> index 8a9a9be8ce..ac86ccea47 100644
> --- a/board/freescale/common/Kconfig
> +++ b/board/freescale/common/Kconfig
> @@ -4,3 +4,11 @@ config CHAIN_OF_TRUST
> select FSL_CAAM
> bool
> default y
> +
> +config CMD_ESBC_VALIDATE
> + bool "Enable the 'esbc_validate' and 'esbc_halt' commands"
> + help
> + This option enables two commands used for secure booting:
> +
> + esbc_validate - validate signature using RSA verification
> + esbc_halt - put the core in spin loop (Secure Boot Only)

This should be default y if CHAIN_OF_TRUST then the defconfig changes go
away. This or similar is something I've been doing whenever an option
is defined under the fsl_secure_boot.h headers.

--
Tom
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: Digital signature
URL: <http://lists.denx.de/pipermail/u-boot/attachments/20170515/d84d2115/attachment.sig>