[U-Boot] [PATCH 20/47] Convert CONFIG_CMD_ESBC_VALIDATE to Kconfig

[Tom Rini]

On Mon, May 15, 2017 at 04:57:35AM -0600, Simon Glass wrote:

> This converts the following to Kconfig:
>    CONFIG_CMD_ESBC_VALIDATE
> 
> Signed-off-by: Simon Glass <sjg at chromium.org>
> ---
> 
>  arch/arm/include/asm/fsl_secure_boot.h                 | 1 -
>  arch/powerpc/include/asm/fsl_secure_boot.h             | 1 -
>  board/freescale/common/Kconfig                         | 8 ++++++++
[snip]
> diff --git a/board/freescale/common/Kconfig b/board/freescale/common/Kconfig
> index 8a9a9be8ce..ac86ccea47 100644
> --- a/board/freescale/common/Kconfig
> +++ b/board/freescale/common/Kconfig
> @@ -4,3 +4,11 @@ config CHAIN_OF_TRUST
>  	select FSL_CAAM
>  	bool
>  	default y
> +
> +config CMD_ESBC_VALIDATE
> +	bool "Enable the 'esbc_validate' and 'esbc_halt' commands"
> +	help
> +	  This option enables two commands used for secure booting:
> +
> +	    esbc_validate - validate signature using RSA verification
> +	    esbc_halt - put the core in spin loop (Secure Boot Only)

This should be default y if CHAIN_OF_TRUST then the defconfig changes go
away.  This or similar is something I've been doing whenever an option
is defined under the fsl_secure_boot.h headers.

-- 
Tom
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: Digital signature
URL: <http://lists.denx.de/pipermail/u-boot/attachments/20170515/d84d2115/attachment.sig>