Hi Simon, > Also see cli_process_fdt() which allows you to lock out commands using > a device-tree setting. This avoids changing the U-Boot binary - it is > easy enough to update the device tree using fdtput. This is how Chrome > OS did it. Hmm, interesting approach. Thanks for your suggestion. Petr