Always select the piggy verification if HAB is enabled on i.MX8, otherwise the signed PBL might load untrusted piggydata. Signed-off-by: Rouven Czerwinski <r.czerwinski@xxxxxxxxxxxxxx> --- arch/arm/mach-imx/Kconfig | 1 + 1 file changed, 1 insertion(+) diff --git a/arch/arm/mach-imx/Kconfig b/arch/arm/mach-imx/Kconfig index 8fcef3f..ac16290 100644 --- a/arch/arm/mach-imx/Kconfig +++ b/arch/arm/mach-imx/Kconfig @@ -792,6 +792,7 @@ config HABV4 select IMX_OCOTP depends on ARCH_IMX6 || ARCH_IMX8MQ depends on OFDEVICE + select PBL_VERIFY_PIGGY if ARCH_IMX8MQ help High Assurance Boot, as found on i.MX28/i.MX6/i.MX8MQ. -- git-series 0.9.1 _______________________________________________ barebox mailing list barebox@xxxxxxxxxxxxxxxxxxx http://lists.infradead.org/mailman/listinfo/barebox
