Semihosting allows a virtual machine to write to the host file system. Such dangerous settings should not be in a defconfig.
Move it to a CI configuration override. Signed-off-by: Heinrich Schuchardt <[email protected]> --- .azure-pipelines.yml | 1 + .gitlab-ci.yml | 1 + configs/qemu_arm64_defconfig | 1 - 3 files changed, 2 insertions(+), 1 deletion(-) diff --git a/.azure-pipelines.yml b/.azure-pipelines.yml index 25b0e4c985c..81a36da7114 100644 --- a/.azure-pipelines.yml +++ b/.azure-pipelines.yml @@ -504,6 +504,7 @@ stages: qemu_arm64: TEST_PY_BD: "qemu_arm64" TEST_PY_TEST_SPEC: "not sleep" + OVERRIDE: "-a CONFIG_SEMIHOSTING=y" qemu_arm64_lwip: TEST_PY_BD: "qemu_arm64_lwip" TEST_PY_TEST_SPEC: "test_net_dhcp or test_net_ping or test_net_tftpboot" diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml index 08bea0dd234..28a32f9f4d3 100644 --- a/.gitlab-ci.yml +++ b/.gitlab-ci.yml @@ -387,6 +387,7 @@ qemu_arm64 test.py: variables: TEST_PY_BD: "qemu_arm64" TEST_PY_TEST_SPEC: "not sleep" + OVERRIDE: "-a CONFIG_SEMIHOSTING=y" <<: *buildman_and_testpy_dfn qemu_arm64_lwip test.py: diff --git a/configs/qemu_arm64_defconfig b/configs/qemu_arm64_defconfig index 12ed6b61239..fd0bdad2d62 100644 --- a/configs/qemu_arm64_defconfig +++ b/configs/qemu_arm64_defconfig @@ -71,7 +71,6 @@ CONFIG_SYSRESET_PSCI=y CONFIG_TPM2_MMIO=y CONFIG_USB_EHCI_HCD=y CONFIG_USB_EHCI_PCI=y -CONFIG_SEMIHOSTING=y CONFIG_MBEDTLS_LIB=y CONFIG_TPM=y CONFIG_TPM_PCR_ALLOCATE=y -- 2.51.0
