Hi Tom, thanks for your reply.
Such way is of course possible, but you surely know I'm rather
interested in more clever solutions. Besides the understandable fact
that I don't want to maintain two u-boot variants and flash it twice, I
also believe it can be useful to lock "almost everything" and unlock it
once I need, e.g. in case of some troubles.
So any suggestions which would really answer my question, please?
On 07/29/2016 03:31 PM, Tom Rini wrote:
On Thu, Jul 28, 2016 at 04:40:29AM -0700, kubiznak.petr wrote:
Hello,
I wonder whether it is possible to dynamically enable/disable a command.
Since u-boot does not provide any secure authentication method, it is
dangerous to keep some commands available to a potential hacker. E.g.
the "fuse" command. On the other hand, I need these commands during the
manufacturing process. So my idea is to enable/disable the commands
dynamically based on some obscure logic. Is there a way to do it without
need to deeply hack the code?
Well, there's a few ways to do this. The first way would simply be to
install a different build of U-Boot onto the board than the one used
during flashing as part of the manufacturing process.
_______________________________________________
U-Boot mailing list
U-Boot@lists.denx.de
http://lists.denx.de/mailman/listinfo/u-boot
