GNUBoot
/
coreboot-kgpe-d16
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

vboot: Force config file inclusion with CBFS integration 

CONFIG_VBOOT_CBFS_INTEGRATION images are signed differently than normal
images. futility needs to be able to tell this difference, and it parses
the `config` file included in CBFS to do this. This change codifies that
dependency in Kconfig so that nobody can accidentally break this by
turning off config file inclusion.

Signed-off-by: Julius Werner <jwerner@chromium.org>
Change-Id: I2b2d245b850bc65abb4e72f20b4e360312c828f7
Reviewed-on: https://review.coreboot.org/c/coreboot/+/70157
Reviewed-by: Yu-Ping Wu <yupingso@google.com>
Reviewed-by: Jakub Czapiga <jacz@semihalf.com>
Tested-by: build bot (Jenkins) <no-reply@coreboot.org>
This commit is contained in:
Julius Werner 2022-11-30 15:18:36 -08:00 committed by Yu-Ping Wu
parent 4924e42275
commit 7a9bd2b2e4
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
src/security/vboot/Kconfig
View File

@ -40,6 +40,7 @@ config VBOOT_CBFS_INTEGRATION
default n default n
depends on VBOOT_SLOTS_RW_A depends on VBOOT_SLOTS_RW_A
depends on CBFS_VERIFICATION depends on CBFS_VERIFICATION
select INCLUDE_CONFIG_FILE # futility needs this to auto-detect signing type
help help
Say yes here to enable cryptographic verification of RW slots CBFS Say yes here to enable cryptographic verification of RW slots CBFS
metadata. This will replace body hash verification. metadata. This will replace body hash verification.