The purpose of BOOTM_OPTIONAL_SIGNED_IMAGES is to select HAS_INSECURE_DEFAULTS, but it should only do so when BOOTM support is actually compiled in. Signed-off-by: Sascha Hauer <s.hauer@xxxxxxxxxxxxxx> --- common/Kconfig | 1 + 1 file changed, 1 insertion(+) diff --git a/common/Kconfig b/common/Kconfig index 8a051a29e7..12026b8232 100644 --- a/common/Kconfig +++ b/common/Kconfig @@ -768,6 +768,7 @@ config BOOTM_FORCE_SIGNED_IMAGES config BOOTM_OPTIONAL_SIGNED_IMAGES def_bool !BOOTM_FORCE_SIGNED_IMAGES select HAS_INSECURE_DEFAULTS + depends on BOOTM help With this option enabled, barebox can be reconfigured to not verify signed images. It's the board code's responsibility to call the function -- 2.39.5
