u-boot/boot
Sean Anderson bcc85b96b5 cmd: source: Support specifying config name
As discussed previously [1,2], the source command is not safe to use with
verified boot unless there is a key with required = "images" (which has its
own problems). This is because if such a key is absent, signatures are
verified but not required. It is assumed that configuration nodes will
provide the signature. Because the source command does not use
configurations to determine the image to source, effectively no
verification takes place.

To address this, allow specifying configuration nodes. We use the same
syntax as the bootm command (helpfully provided for us by fit_parse_conf).
By default, we first try the default config and then the default image. To
force using a config, # must be present in the command (e.g. `source
$loadaddr#my-conf`). For convenience, the config may be omitted, just like
the address may be (e.g. `source \#`). This also works for images
(`source :` behaves exactly like `source` currently does).

[1] https://lore.kernel.org/u-boot/7d711133-d513-5bcb-52f2-a9dbaa9eeded@prevas.dk/
[2] https://lore.kernel.org/u-boot/042dcb34-f85f-351e-1b0e-513f89005fdd@gmail.com/

Signed-off-by: Sean Anderson <sean.anderson@seco.com>
Reviewed-by: Simon Glass <sjg@chromium.org>
2022-12-31 13:35:19 -05:00
..
android_ab.c doc: replace @return by Return: 2022-01-19 18:11:34 +01:00
boot_fit.c treewide: Drop image_header_t typedef 2022-09-29 16:07:57 -04:00
bootdev-uclass.c bootstd: Add a way to set up a bootflow 2022-10-31 11:02:44 -04:00
bootflow.c bootstd: Add a way to set up a bootflow 2022-10-31 11:02:44 -04:00
bootm.c net: Remove eth_legacy.c 2022-12-07 16:04:17 -05:00
bootm_os.c treewide: Drop image_header_t typedef 2022-09-29 16:07:57 -04:00
bootmeth-uclass.c bootstd: Add a way to set up a bootflow 2022-10-31 11:02:44 -04:00
bootmeth_distro.c Rename disto_[pxe_]getfile to distro_[pxe_]getfile 2022-08-26 16:33:48 -06:00
bootmeth_efi.c bootstd: Add an implementation of EFI boot 2022-04-25 10:00:04 -04:00
bootmeth_efi_mgr.c bootstd: Allow EFI bootmgr to support an invalid bootflow 2022-08-12 08:17:10 -04:00
bootmeth_pxe.c Rename disto_[pxe_]getfile to distro_[pxe_]getfile 2022-08-26 16:33:48 -06:00
bootmeth_sandbox.c bootstd: Add a sandbox bootmeth driver 2022-04-25 10:00:04 -04:00
bootmeth_script.c cmd: source: Support specifying config name 2022-12-31 13:35:19 -05:00
bootretry.c cyclic: Use schedule() instead of WATCHDOG_RESET() 2022-09-18 10:26:33 +02:00
bootstd-uclass.c bootstd: Drop the system bootdev 2022-08-12 08:17:11 -04:00
common_fit.c Create a new boot/ directory 2021-11-11 19:01:56 -05:00
fdt_region.c doc: replace @return by Return: 2022-01-19 18:11:34 +01:00
image-android-dt.c doc: replace @return by Return: 2022-01-19 18:11:34 +01:00
image-android.c treewide: Drop image_header_t typedef 2022-09-29 16:07:57 -04:00
image-board.c global: Move remaining CONFIG_SYS_* to CFG_SYS_* 2022-12-05 16:06:08 -05:00
image-cipher.c Create a new boot/ directory 2021-11-11 19:01:56 -05:00
image-fdt.c boot: Pass the correct FDT to the EVT_FT_FIXUP event 2022-10-17 21:17:13 -06:00
image-fit-sig.c mkimage: fit: Fix signing of configs with external data 2022-10-26 11:36:06 -04:00
image-fit.c image: Allow loading a FIT image for a particular phase 2022-10-31 11:02:45 -04:00
image-host.c Create a new boot/ directory 2021-11-11 19:01:56 -05:00
image-pre-load.c boot: image-pre-load: Check environment for location of signature info 2022-10-11 15:40:48 -04:00
image-sig.c Create a new boot/ directory 2021-11-11 19:01:56 -05:00
image.c tools: mkimage: add new image type "fdt_legacy" 2022-12-08 09:29:02 -05:00
Kconfig common/spl/spl_ram: Remove unused default 2022-12-23 13:01:13 -05:00
Makefile vbe: Move OS implementation into a separate file 2022-10-31 11:03:36 -04:00
pxe_utils.c Prepare v2023.01-rc4 2022-12-21 13:09:01 -05:00
vbe.c boot: fix vbe_find_first_device() 2022-08-26 16:32:59 -06:00
vbe_request.c vbe: Support reading the next SPL phase via VBE 2022-10-31 11:03:18 -04:00
vbe_simple.c vbe: Move OS implementation into a separate file 2022-10-31 11:03:36 -04:00
vbe_simple.h vbe: Move OS implementation into a separate file 2022-10-31 11:03:36 -04:00
vbe_simple_fw.c vbe: Record which phases loaded using VBE 2022-10-31 11:04:00 -04:00
vbe_simple_os.c vbe: Add info about the VBE device to the fwupd node 2022-10-31 11:04:00 -04:00