Hi,

I am an application software guy learning low-level embedded programming.

I am trying to block/disable u-boot console access all together. Is there any helpful documentation for this topic.

The things I gathered until now:

1. Disable Serial Port pins. Question - If an attacker gains root access, can he reconfigure serial port pins to re-enable this ? How can we disable serial port access at the hardware level ?

2. Enable "silent" & bootdelay=0 environment variables. 3. Enable password protection of U-Boot console. 4. Encrypt "Environment Memory Block"

in case of *any* hardware interruptions, the u-boot opens the console. Can we disable this behavior to stop the device unless a power recycle happens or start the boot process again.

I appreciate any general comments on this topic.

Thanks, Alan