[Skiboot] [PATCH] TEMPORARY HACK: Disable verifying VERSION
Stewart Smith
stewart at linux.ibm.com
Thu Sep 13 19:16:28 AEST 2018
Seeing as all the VERSION signing code is taking way too long to get
upstream, let's temporarily skip verifying VERSION for now.
Signed-off-by: Stewart Smith <stewart at linux.ibm.com>
---
core/flash.c | 7 ++++++-
1 file changed, 6 insertions(+), 1 deletion(-)
diff --git a/core/flash.c b/core/flash.c
index 8f00d85e4651..8e7b90e672c4 100644
--- a/core/flash.c
+++ b/core/flash.c
@@ -823,7 +823,12 @@ done_reading:
* Verify and measure the retrieved PNOR partition as part of the
* secure boot and trusted boot requirements
*/
- secureboot_verify(id, buf, *len);
+ /*
+ * FIXME: TEMPORARY HACK: Don't verify VERSION until all bits of code
+ * to produce a signed VERSION partition are upstream for a while.
+ */
+ if (id != RESOURCE_ID_VERSION)
+ secureboot_verify(id, buf, *len);
trustedboot_measure(id, buf, *len);
/* Find subpartition */
--
2.17.1
More information about the Skiboot
mailing list