[PATCH v2 00/24] Add security policy support

[Sascha Hauer]

On Wed, 17 Sep 2025 15:53:20 +0200, Sascha Hauer wrote:
> Security policies are a mechanism for barebox to prevent, when so
> desired, security relevant code from being executed.
> 
> Security policies are controlled via a second Kconfig menu structure
> (called Sconfig) which collects security relevant options.
> 
> While the normal Kconfig menu structure is about feature support
> enabled at compile time, a security policy determines whether a
> feature is allowed or prohibited at runtime with an explicit focus
> on security.
> 
> [...]

Applied, thanks!

[01/24] kconfig: allow setting CONFIG_ from the outside
        https://git.pengutronix.de/cgit/barebox/commit/?id=9a4281052b8f (link may not be stable)
[02/24] scripts: include scripts/include for all host tools
        https://git.pengutronix.de/cgit/barebox/commit/?id=b1dd33f59373 (link may not be stable)
[03/24] kbuild: implement loopable loop_cmd
        https://git.pengutronix.de/cgit/barebox/commit/?id=daaa3560414e (link may not be stable)
[04/24] Add security policy support
        https://git.pengutronix.de/cgit/barebox/commit/?id=03a1030ea708 (link may not be stable)
[05/24] kbuild: allow security config use without source tree modification
        https://git.pengutronix.de/cgit/barebox/commit/?id=74b1901d06f2 (link may not be stable)
[06/24] defaultenv: update PS1 according to security policy
        https://git.pengutronix.de/cgit/barebox/commit/?id=98e1b8ef80b9 (link may not be stable)
[07/24] security: policy: support externally provided configs
        https://git.pengutronix.de/cgit/barebox/commit/?id=d94aa6a99dfa (link may not be stable)
[08/24] commands: implement sconfig command
        https://git.pengutronix.de/cgit/barebox/commit/?id=56de5ea4fe40 (link may not be stable)
[09/24] docs: security-policies: add documentation
        https://git.pengutronix.de/cgit/barebox/commit/?id=9d8f7062b581 (link may not be stable)
[10/24] commands: go: add security config option
        https://git.pengutronix.de/cgit/barebox/commit/?id=58401df16031 (link may not be stable)
[11/24] console: ratp: add security config option
        https://git.pengutronix.de/cgit/barebox/commit/?id=d1f12e4aaaff (link may not be stable)
[12/24] bootm: support calling bootm_optional_signed_images at any time
        https://git.pengutronix.de/cgit/barebox/commit/?id=48f1c4c70944 (link may not be stable)
[13/24] bootm: make unsigned image support runtime configurable
        https://git.pengutronix.de/cgit/barebox/commit/?id=9dbde2ceea58 (link may not be stable)
[14/24] ARM: configs: add virt32_secure_defconfig
        https://git.pengutronix.de/cgit/barebox/commit/?id=cc285c8c0ab4 (link may not be stable)
[15/24] boards: qemu-virt: add security policies
        https://git.pengutronix.de/cgit/barebox/commit/?id=332277872144 (link may not be stable)
[16/24] boards: qemu-virt: allow setting policy from command line
        https://git.pengutronix.de/cgit/barebox/commit/?id=cea49ae7bb88 (link may not be stable)
[17/24] test: py: add basic security policy test
        https://git.pengutronix.de/cgit/barebox/commit/?id=b3773336f564 (link may not be stable)
[18/24] usbserial: add inline wrappers
        https://git.pengutronix.de/cgit/barebox/commit/?id=4ee3cb57d9d9 (link may not be stable)
[19/24] security: usbgadget: add usbgadget security policy
        https://git.pengutronix.de/cgit/barebox/commit/?id=0a14e84181ea (link may not be stable)
[20/24] security: fastboot: add security policy for fastboot oem
        https://git.pengutronix.de/cgit/barebox/commit/?id=816b93d4bff7 (link may not be stable)
[21/24] security: shell: add policy for executing the shell
        https://git.pengutronix.de/cgit/barebox/commit/?id=c3dede9a094a (link may not be stable)
[22/24] security: add security policy for loading barebox environment
        https://git.pengutronix.de/cgit/barebox/commit/?id=0460dcb1b4a5 (link may not be stable)
[23/24] security: add filesystem security policies
        https://git.pengutronix.de/cgit/barebox/commit/?id=7db9682703cd (link may not be stable)
[24/24] security: console: add security policy for console input
        https://git.pengutronix.de/cgit/barebox/commit/?id=1d03e88d966d (link may not be stable)

Best regards,
-- 
Sascha Hauer <s.hauer at pengutronix.de>