[PATCH v1 2/2] spl: prevent loading args file in secure falcon mode

[Tom Rini]

On Wed, Oct 08, 2025 at 05:06:04PM +0530, Anshul Dalal wrote:

> The expected payload for the SPL in secure falcon mode is a fitImage
> that contains the kernel image and the DT. This removes the need to load
> an additional args file, which exposes an additional attack vector since
> it can not be verified.
> 
> Therefore this patch disables loading of the arg file when
> SPL_OS_BOOT_SECURE is set.
> 
> Signed-off-by: Anshul Dalal <anshuld at ti.com>

Reviewed-by: Tom Rini <trini at konsulko.com>

-- 
Tom
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <https://lists.denx.de/pipermail/u-boot/attachments/20251008/17bf802c/attachment.sig>