diff options
| author | Christian Eggers <ceggers@arri.de> | 2020-02-21 13:15:12 +0100 |
|---|---|---|
| committer | Sascha Hauer <s.hauer@pengutronix.de> | 2020-02-25 09:01:41 +0100 |
| commit | ba08e336c85196affabb5983768c6b5996c6bb00 (patch) | |
| tree | acdce349d751aaca28948c43c39a66cb7f4d5500 /drivers/usb/gadget/Kconfig | |
| parent | ed5d14afad1c303caab209549b33f795df3d6d6a (diff) | |
| download | barebox-ba08e336c85196affabb5983768c6b5996c6bb00.tar.gz barebox-ba08e336c85196affabb5983768c6b5996c6bb00.tar.xz | |
gadget: f_fastboot: New Kconfig option USB_GADGET_FASTBOOT_CMD_OEM
Most fastboot commands are suitable for a secure boot environment as
they only allow to download/flash/erase to files/partitions which were
explicitly specified in the usbgadget command.
The "oem" group of commands allows execution of arbitrary barebox
commands. This needs to be disabled for secure boot devices.
Signed-off-by: Christian Eggers <ceggers@arri.de>
Signed-off-by: Sascha Hauer <s.hauer@pengutronix.de>
Diffstat (limited to 'drivers/usb/gadget/Kconfig')
| -rw-r--r-- | drivers/usb/gadget/Kconfig | 11 |
1 files changed, 11 insertions, 0 deletions
diff --git a/drivers/usb/gadget/Kconfig b/drivers/usb/gadget/Kconfig index 9d6a262038..a3e2a8b4e3 100644 --- a/drivers/usb/gadget/Kconfig +++ b/drivers/usb/gadget/Kconfig @@ -58,6 +58,7 @@ config USB_GADGET_FASTBOOT config USB_GADGET_FASTBOOT_SPARSE bool + depends on USB_GADGET_FASTBOOT select IMAGE_SPARSE prompt "Enable Fastboot sparse image support" help @@ -77,4 +78,14 @@ config USB_GADGET_FASTBOOT_BUF a buffer, then using a buffer might be better. Say no here unless you know what you are doing. + +config USB_GADGET_FASTBOOT_CMD_OEM + bool + depends on USB_GADGET_FASTBOOT + prompt "Enable OEM commands" + help + This option enables the fastboot "oem" group of commands. They allow to + executing arbitrary barebox commands and may be disabled in secure + environments. + endif |