This is now recommended for all systems. Especially for the HAB usecase
disallowing alternative boot selection after WDOG reset is essential.
Signed-off-by: Bastian Stender <bst@xxxxxxxxxxxxxx>
---
drivers/hab/hab.c | 7 +++++++
1 file changed, 7 insertions(+)
diff --git a/drivers/hab/hab.c b/drivers/hab/hab.c
index 0d71f5bf26..423f69e5b1 100644
--- a/drivers/hab/hab.c
+++ b/drivers/hab/hab.c
@@ -161,7 +161,14 @@ static int imx_hab_permanent_write_enable_ocotp(int enable)
static int imx_hab_lockdown_device_ocotp(void)
{
+ int ret;
+
+ ret = imx_ocotp_write_field(OCOTP_DIR_BT_DIS, 1);
+ if (ret < 0)
+ return ret;
+
return imx_ocotp_write_field(OCOTP_SEC_CONFIG_1, 1);
+
}
static int imx_hab_device_locked_down_ocotp(void)
--
2.18.0
_______________________________________________
barebox mailing list
barebox@xxxxxxxxxxxxxxxxxxx
http://lists.infradead.org/mailman/listinfo/barebox
