Currently, unsigned TEE binaries can be booted. This patch ensures
that CONFIG_BOOTM_FORCE_SIGNED_IMAGES is also enforced for TEE
binaries.
Signed-off-by: Albert Schwarzkopf <a.schwarzkopf@xxxxxxxxx>
---
common/bootm.c | 1 +
1 file changed, 1 insertion(+)
diff --git a/common/bootm.c b/common/bootm.c
index 366f31455..9fdb0bc1f 100644
--- a/common/bootm.c
+++ b/common/bootm.c
@@ -592,6 +592,7 @@ int bootm_boot(struct bootm_data *bootm_data)
*/
data->oftree_file = NULL;
data->initrd_file = NULL;
+ data->tee_file = NULL;
if (os_type != filetype_oftree) {
printf("Signed boot and image is no FIT image, aborting\n");
ret = -EINVAL;
--
2.17.1
_______________________________________________
barebox mailing list
barebox@xxxxxxxxxxxxxxxxxxx
http://lists.infradead.org/mailman/listinfo/barebox
