[Skiboot] [PATCH] TEMPORARY HACK: Disable verifying VERSION

Stewart Smith stewart at linux.ibm.com
Thu Sep 13 19:16:28 AEST 2018


Seeing as all the VERSION signing code is taking way too long to get
upstream, let's temporarily skip verifying VERSION for now.

Signed-off-by: Stewart Smith <stewart at linux.ibm.com>
---
 core/flash.c | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/core/flash.c b/core/flash.c
index 8f00d85e4651..8e7b90e672c4 100644
--- a/core/flash.c
+++ b/core/flash.c
@@ -823,7 +823,12 @@ done_reading:
 	 * Verify and measure the retrieved PNOR partition as part of the
 	 * secure boot and trusted boot requirements
 	 */
-	secureboot_verify(id, buf, *len);
+	/*
+	 * FIXME: TEMPORARY HACK: Don't verify VERSION until all bits of code
+	 * to produce a signed VERSION partition are upstream for a while.
+	 */
+	if (id != RESOURCE_ID_VERSION)
+		secureboot_verify(id, buf, *len);
 	trustedboot_measure(id, buf, *len);
 
 	/* Find subpartition */
-- 
2.17.1



More information about the Skiboot mailing list