Re: [U-Boot] Using CONFIG_ENV_FLAGS_LIST

2019-09-09 Thread AKASHI Takahiro
On Mon, Sep 09, 2019 at 02:04:50PM +0200, Lukasz Majewski wrote: > Hi Claudius, > > > Hi Lukasz, > > > > On 07/09/2019 00.23, Lukasz Majewski wrote: > > > Hi Claudius, > > > > > >> Hi, > > >> > > >> I am currently looking into variable flags in order to make some > > >> variables read-only for

Re: [U-Boot] Using CONFIG_ENV_FLAGS_LIST

2019-09-09 Thread Stefano Babic
On 09/09/19 14:54, Claudius Heine wrote: > Hi Stefano, > > On 09/09/2019 13.26, Stefano Babic wrote: >> Hi Claudius, >> >> On 02/09/19 16:02, Claudius Heine wrote: >>> Hi, >>> >>> I am currently looking into variable flags in order to make some >>> variables read-only for secure boot. >>> >>> The

Re: [U-Boot] Using CONFIG_ENV_FLAGS_LIST

2019-09-09 Thread Claudius Heine
Hi Stefano, On 09/09/2019 13.26, Stefano Babic wrote: > Hi Claudius, > > On 02/09/19 16:02, Claudius Heine wrote: >> Hi, >> >> I am currently looking into variable flags in order to make some >> variables read-only for secure boot. >> >> The idea is that the u-boot binary is signed, while the env

Re: [U-Boot] Using CONFIG_ENV_FLAGS_LIST

2019-09-09 Thread Lukasz Majewski
Hi Claudius, > Hi Lukasz, > > On 07/09/2019 00.23, Lukasz Majewski wrote: > > Hi Claudius, > > > >> Hi, > >> > >> I am currently looking into variable flags in order to make some > >> variables read-only for secure boot. > >> > >> The idea is that the u-boot binary is signed, while the environ

Re: [U-Boot] Using CONFIG_ENV_FLAGS_LIST

2019-09-09 Thread Stefano Babic
Hi Claudius, On 02/09/19 16:02, Claudius Heine wrote: > Hi, > > I am currently looking into variable flags in order to make some > variables read-only for secure boot. > > The idea is that the u-boot binary is signed, while the environment > file/partition is not. So the built-in default environ

Re: [U-Boot] Using CONFIG_ENV_FLAGS_LIST

2019-09-09 Thread Claudius Heine
Hi Lukasz, On 07/09/2019 00.23, Lukasz Majewski wrote: > Hi Claudius, > >> Hi, >> >> I am currently looking into variable flags in order to make some >> variables read-only for secure boot. >> >> The idea is that the u-boot binary is signed, while the environment >> file/partition is not. So the

Re: [U-Boot] Using CONFIG_ENV_FLAGS_LIST

2019-09-06 Thread Lukasz Majewski
Hi Claudius, > Hi, > > I am currently looking into variable flags in order to make some > variables read-only for secure boot. > > The idea is that the u-boot binary is signed, while the environment > file/partition is not. So the built-in default environment of u-boot > can be trusted, while th

[U-Boot] Using CONFIG_ENV_FLAGS_LIST

2019-09-02 Thread Claudius Heine
Hi, I am currently looking into variable flags in order to make some variables read-only for secure boot. The idea is that the u-boot binary is signed, while the environment file/partition is not. So the built-in default environment of u-boot can be trusted, while the external environment cannot.