Re: [U-Boot] [PATCH 1/3] arm: imx-common: add SECURE_BOOT option to Kconfig

Nicely done Gary!

On 08/23/2016 02:55 PM, Gary Bisson wrote:

So the option can easily be selected through menuconfig.

Signed-off-by: Gary Bisson gary.bisson@boundarydevices.com

arch/arm/imx-common/Kconfig | 9 +++++++++ 1 file changed, 9 insertions(+)

diff --git a/arch/arm/imx-common/Kconfig b/arch/arm/imx-common/Kconfig index 1b7da5a..5ee230e 100644 --- a/arch/arm/imx-common/Kconfig +++ b/arch/arm/imx-common/Kconfig @@ -17,3 +17,12 @@ config IMX_BOOTAUX depends on ARCH_MX7 || ARCH_MX6 help bootaux [addr] to boot auxiliary core.

+config SECURE_BOOT

• bool "Support i.MX HAB features"
• depends on ARCH_MX7 || ARCH_MX6 || ARCH_MX5
• help

•  This option enables the support for secure boot (HAB) which
  

•  includes adding a CSF section to the final imx image and
  

^^^ This doesn't add a CSF section.

Perhaps this should say "can enable a conditional section of an i.MX configuration (.cfg) file when producing an imx image".

•  some security-related commands such as 'hab_status'.
  

•  See doc/README.mxc_hab for more details.
  
  

You should probably include a note in README.mxc_hab about use in .cfg files.