On Tue, 9 Nov 2021 at 00:23, Rover Mo <myz...@126.com> wrote: > > To prevent booting unsigned images, don't enable the non-secure boot > commands(booti, bootz .etc) by default if secure boot enabled. > > Signed-off-by: Rover Mo <myz...@126.com> > Cc: Heinrich Schuchardt <xypron.g...@gmx.de> > Cc: Simon Glass <s...@chromium.org> > > --- > > Changes for v2: > - Don't enable the non-secure boot commands too if !EFI_SECURE_BOOT > - Update the help information > - Changed commit title > > cmd/Kconfig | 11 +++++++++-- > common/Kconfig.boot | 2 +- > 2 files changed, 10 insertions(+), 3 deletions(-)
Reviewed-by: Simon Glass <s...@chromium.org> Tested-on: coral, sandbox Tested-by: Simon Glass <s...@chromium.org>
