[PATCH v2 14/14] ARM: k3: r5: select HAS_INSECURE_DEFAULTS when necessary

Sascha Hauer s.hauer at pengutronix.de
Tue Mar 11 05:25:27 PDT 2025


The R5 code will load the full barebox binary which needs to be
authenticated in order to get a secure boot flow. Select
HAS_INSECURE_DEFAULTS when no authentication method is compiled in.

Signed-off-by: Sascha Hauer <s.hauer at pengutronix.de>
---
 arch/arm/mach-k3/Kconfig | 1 +
 1 file changed, 1 insertion(+)

diff --git a/arch/arm/mach-k3/Kconfig b/arch/arm/mach-k3/Kconfig
index e93e3154c8..3dcdb20186 100644
--- a/arch/arm/mach-k3/Kconfig
+++ b/arch/arm/mach-k3/Kconfig
@@ -19,6 +19,7 @@ config MACH_K3_CORTEX_R5
 	select HAVE_FIRMWARE_VERIFY_NEXT_IMAGE
 	depends on 32BIT
 	select ARM_USE_COMPRESSED_DTB
+	select HAS_INSECURE_DEFAULTS if (!FIRMWARE_VERIFY_NEXT_IMAGE && !ARCH_K3_AUTHENTICATE_IMAGE)
 	default y
 
 config MACH_K3_CORTEX_A

-- 
2.39.5




More information about the barebox mailing list