security/vboot: Split fwid.region build target

Add the ability to specify the fwid version via a file instead of
via config. This makes it so when doing an incremental build all
objects are not invalidated when bumping the fwid.

The coreboot ebuild will create this file to pass the latest version.

BUG=b:112267918
TEST=ran dmidecide -t 0 and verified version was present

Change-Id: I955106efd648a75a1311f24ede46bd238d1517e0
Signed-off-by: Raul E Rangel <rrangel@chromium.org>
Reviewed-on: https://review.coreboot.org/27884
Tested-by: build bot (Jenkins) <no-reply@coreboot.org>
Reviewed-by: Julius Werner <jwerner@chromium.org>
This commit is contained in:
Raul E Rangel 2018-08-06 16:13:14 -06:00 committed by Martin Roth
parent 3f61949294
commit 8c38a8b191
1 changed files with 7 additions and 2 deletions

View File

@ -223,8 +223,13 @@ ifneq ($(CONFIG_GBB_BMPFV_FILE),)
endif endif
mv $@.tmp $@ mv $@.tmp $@
$(obj)/fwid.region: $(obj)/fwid.version:
printf "$(CONFIG_VBOOT_FWID_MODEL)$(CONFIG_VBOOT_FWID_VERSION)\0" > $@ echo -n "$(CONFIG_VBOOT_FWID_VERSION)" > $@
$(obj)/fwid.region: $(obj)/fwid.version
printf "%s%s\0" \
"$(CONFIG_VBOOT_FWID_MODEL)" \
"$(file < $(obj)/fwid.version)" > $@
build_complete:: $(obj)/gbb.region $(obj)/fwid.region build_complete:: $(obj)/gbb.region $(obj)/fwid.region
@printf " WRITE GBB\n" @printf " WRITE GBB\n"