[RFC PATCH v1 4/4] cmd: Kconfig: disable loading raw images in secure os boot

[Anshul Dalal]

Raw kernel images can not be authenticated so disable loading such
binaries in secure falcon mode. This change restricts the falcon mode
SPL to FIT as the only viable boot image which can be authenticated.

Signed-off-by: Anshul Dalal <anshuld at ti.com>
---
 cmd/Kconfig | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/cmd/Kconfig b/cmd/Kconfig
index ed741d43cea..8eb55dd7f6e 100644
--- a/cmd/Kconfig
+++ b/cmd/Kconfig
@@ -353,12 +353,13 @@ config BOOTM_ELF
 
 config CMD_BOOTZ
 	bool "bootz"
+	depends on !SPL_SECURE_OS_BOOT
 	help
 	  Boot the Linux zImage
 
 config CMD_BOOTI
 	bool "booti"
-	depends on ARM64 || RISCV || SANDBOX
+	depends on (ARM64 || RISCV || SANDBOX) && !SPL_SECURE_OS_BOOT
 	default y
 	help
 	  Boot an AArch64 Linux Kernel image from memory.
-- 
2.49.0