Re: [PATCH 1/2] bootm: don't allow bootm_set_verify_mode if BOOTM_FORCE_SIGNED_IMAGES is enabled

2024-04-08 Thread Marco Felsch
On 24-04-08, Ahmad Fatoum wrote: > Hello Marco, > > On 08.04.24 09:36, Marco Felsch wrote: > > The only allowed value for bootm_verify_mode is BOOTM_VERIFY_SIGNATURE > > if CONFIG_BOOTM_FORCE_SIGNED_IMAGES is enabled. This is set via the > > bootm_init() initcall. All further attempts to modify

Re: [PATCH 1/2] bootm: don't allow bootm_set_verify_mode if BOOTM_FORCE_SIGNED_IMAGES is enabled

2024-04-08 Thread Ahmad Fatoum
Hello Marco, On 08.04.24 09:36, Marco Felsch wrote: > The only allowed value for bootm_verify_mode is BOOTM_VERIFY_SIGNATURE > if CONFIG_BOOTM_FORCE_SIGNED_IMAGES is enabled. This is set via the > bootm_init() initcall. All further attempts to modify this variable > should be prevented. > >

[PATCH 1/2] bootm: don't allow bootm_set_verify_mode if BOOTM_FORCE_SIGNED_IMAGES is enabled

2024-04-08 Thread Marco Felsch
The only allowed value for bootm_verify_mode is BOOTM_VERIFY_SIGNATURE if CONFIG_BOOTM_FORCE_SIGNED_IMAGES is enabled. This is set via the bootm_init() initcall. All further attempts to modify this variable should be prevented. Signed-off-by: Marco Felsch --- common/bootm.c | 5 + 1 file