[Skiboot] [PATCH] libstb/stb.c: force skiboot to ignore the secure mode flag

Claudio Carvalho cclaudio at linux.vnet.ibm.com
Mon Oct 24 14:11:29 AEDT 2016


The secure ROM code must not be called to verify CAPP and BOOTKERNEL
while the PNOR build process is not changed to add containers for these
two partitions.

This sets 'secure_mode=false' after the secure-enabled devtree property is
read from the device tree.

Signed-off-by: Claudio Carvalho <cclaudio at linux.vnet.ibm.com>
---
 libstb/stb.c | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/libstb/stb.c b/libstb/stb.c
index 8c8f380..4db9ebf 100644
--- a/libstb/stb.c
+++ b/libstb/stb.c
@@ -117,8 +117,9 @@ void stb_init(void)
 #else
 	secure_mode = dt_has_node_property(ibm_secureboot, "secure-enabled",
 					   NULL);
-	prlog(PR_NOTICE, "STB: secure mode %s\n",
+	prlog(PR_NOTICE, "STB: secure mode %s (flag ignored)\n",
 	      secure_mode ? "on" : "off");
+	secure_mode = false;
 #endif
 
 #ifdef STB_FORCE_TRUSTED_MODE
-- 
1.9.1



More information about the Skiboot mailing list