diff options
| author | Anshul Dalal <[email protected]> | 2025-10-18 01:03:06 +0530 |
|---|---|---|
| committer | Tom Rini <[email protected]> | 2025-10-20 10:14:00 -0600 |
| commit | a3e67a96452983ae3b35a78cb2910f14fda9dd86 (patch) | |
| tree | 118509ec24b07a48c1ae813654e0d6c5f0f7d889 /common | |
| parent | aabda5407ff2f6d896215b2b8a31064f939fb4dc (diff) | |
spl: Kconfig: add SPL_OS_BOOT_SECURE config symbol
This patch adds the new SPL_OS_BOOT_SECURE symbol that enables secure
boot flow in falcon mode. This symbol can be used to disable certain
inherently insecure options during falcon boot.
Reviewed-by: Tom Rini <[email protected]>
Signed-off-by: Anshul Dalal <[email protected]>
Diffstat (limited to 'common')
| -rw-r--r-- | common/spl/Kconfig | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/common/spl/Kconfig b/common/spl/Kconfig index 4ece5d168f9..ba94d6fe05a 100644 --- a/common/spl/Kconfig +++ b/common/spl/Kconfig @@ -1207,6 +1207,14 @@ config SPL_OS_BOOT Enable booting directly to an OS from SPL. for more info read doc/README.falcon +config SPL_OS_BOOT_SECURE + bool "Allow Falcon Mode on secure devices" + depends on SPL_OS_BOOT + help + This allows for secure devices with signature verification capabilities + to use falcon mode by disabling certain inherently non-securable options + in the SPL boot flow. + config SPL_PAYLOAD_ARGS_ADDR hex "Address in memory to load 'args' file for Falcon Mode to" depends on SPL_OS_BOOT || SPL_LOAD_FIT_OPENSBI_OS_BOOT |