To enforce anti-rollback to any older version, dtb must be always update manually. This should be described in the documentation.
Signed-off-by: Masahisa Kojima masahisa.kojima@linaro.org --- doc/develop/uefi/uefi.rst | 3 +++ 1 file changed, 3 insertions(+)
diff --git a/doc/develop/uefi/uefi.rst b/doc/develop/uefi/uefi.rst index ffd13cebe9..d5f8c5f236 100644 --- a/doc/develop/uefi/uefi.rst +++ b/doc/develop/uefi/uefi.rst @@ -552,6 +552,9 @@ update using a capsule file with --fw-version of 5, the update will fail. When the --fw-version in the capsule file is updated, lowest-supported-version in the dtb might be updated accordingly.
+If user needs to enroce anti-rollback to any older version, +the lowest-supported-version property in dtb must be always updated manually. + To insert the lowest supported version into a dtb
.. code-block:: console
base-commit: e350d0c60d413d441cbdfa9432ebadb56f625903