Raw kernel images can not be authenticated so disable loading such
binaries in secure falcon mode. This change restricts the falcon mode
SPL to FIT as the only viable boot image which can be authenticated.
Signed-off-by: Anshul Dalal <ansh...@ti.com>
---
cmd/Kconfig | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/cmd/Kconfig b/cmd/Kconfig
index ed741d43cea..8eb55dd7f6e 100644
--- a/cmd/Kconfig
+++ b/cmd/Kconfig
@@ -353,12 +353,13 @@ config BOOTM_ELF
config CMD_BOOTZ
bool "bootz"
+ depends on !SPL_SECURE_OS_BOOT
help
Boot the Linux zImage
config CMD_BOOTI
bool "booti"
- depends on ARM64 || RISCV || SANDBOX
+ depends on (ARM64 || RISCV || SANDBOX) && !SPL_SECURE_OS_BOOT
default y
help
Boot an AArch64 Linux Kernel image from memory.
--
2.49.0
