[PATCH] common: bootm: Enforce CONFIG_BOOTM_FORCE_SIGNED_IMAGES for TEE bins

[PATCH] common: bootm: Enforce CONFIG_BOOTM_FORCE_SIGNED_IMAGES for TEE bins

[Albert Schwarzkopf]

Currently, unsigned TEE binaries can be booted. This patch ensures
that CONFIG_BOOTM_FORCE_SIGNED_IMAGES is also enforced for TEE
binaries.

Signed-off-by: Albert Schwarzkopf <a.schwarzkopf@phytec.de>
---
 common/bootm.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/common/bootm.c b/common/bootm.c
index 366f31455..9fdb0bc1f 100644
--- a/common/bootm.c
+++ b/common/bootm.c
@@ -592,6 +592,7 @@ int bootm_boot(struct bootm_data *bootm_data)
 		 */
 		data->oftree_file = NULL;
 		data->initrd_file = NULL;
+		data->tee_file = NULL;
 		if (os_type != filetype_oftree) {
 			printf("Signed boot and image is no FIT image, aborting\n");
 			ret = -EINVAL;
-- 
2.17.1


_______________________________________________
barebox mailing list
barebox@lists.infradead.org
http://lists.infradead.org/mailman/listinfo/barebox

Re: [PATCH] common: bootm: Enforce CONFIG_BOOTM_FORCE_SIGNED_IMAGES for TEE bins

[Sascha Hauer]

On Wed, Apr 22, 2020 at 01:39:52PM +0200, Albert Schwarzkopf wrote:
> Currently, unsigned TEE binaries can be booted. This patch ensures
> that CONFIG_BOOTM_FORCE_SIGNED_IMAGES is also enforced for TEE
> binaries.
> 
> Signed-off-by: Albert Schwarzkopf <a.schwarzkopf@phytec.de>
> ---
>  common/bootm.c | 1 +
>  1 file changed, 1 insertion(+)

Applied, thanks

Sascha

-- 
Pengutronix e.K.                           |                             |
Steuerwalder Str. 21                       | http://www.pengutronix.de/  |
31137 Hildesheim, Germany                  | Phone: +49-5121-206917-0    |
Amtsgericht Hildesheim, HRA 2686           | Fax:   +49-5121-206917-5555 |

_______________________________________________
barebox mailing list
barebox@lists.infradead.org
http://lists.infradead.org/mailman/listinfo/barebox