u-boot/arch
Simon Glass 06fd853890 arm: Add CONFIG_DELAY_ENVIRONMENT to delay environment loading
This option delays loading of the environment until later, so that only the
default environment will be available to U-Boot.

This can address the security risk of untrusted data being used during boot.

Any time you load untrusted data you expose yourself to a bug in the
code. The attacker gets to choose the data so can sometimes carefully
craft it to exploit a bug. We try to avoid touching user-controlled
data during a verified boot unless strictly necessary. Since the
default environment is good enough in this case (or you would just
change it), this gets around the problem by just not loading the
environment.

When CONFIG_DELAY_ENVIRONMENT is defined, it is convenient to have a
run-time way of enabling loading of the environment. Add this to the
fdt as /config/delay-environment.

Note: This patch depends on http://patchwork.ozlabs.org/patch/194342/

Signed-off-by: Doug Anderson <dianders@chromium.org>
Signed-off-by: Simon Glass <sjg@chromium.org>
Reviewed-by: Doug Anderson <dianders@chromium.org>
2013-01-10 22:21:47 +01:00
..
arm arm: Add CONFIG_DELAY_ENVIRONMENT to delay environment loading 2013-01-10 22:21:47 +01:00
avr32 common: Discard the __u_boot_cmd section 2012-10-22 08:29:42 -07:00
blackfin common: Discard the __u_boot_cmd section 2012-10-22 08:29:42 -07:00
m68k env: Use getenv_yesno() more generally 2012-12-13 11:46:55 -07:00
microblaze env: Use getenv_yesno() more generally 2012-12-13 11:46:55 -07:00
mips mips: serial: Fix busted manual relocation 2012-12-12 13:20:24 +01:00
nds32 common: Discard the __u_boot_cmd section 2012-10-22 08:29:42 -07:00
nios2 nios2: remove asm/status_led.h 2012-11-10 19:45:58 +08:00
openrisc openrisc: Change bi_baudrate and global data baudrate to int 2012-10-19 15:25:45 -07:00
powerpc env: Use getenv_yesno() more generally 2012-12-13 11:46:55 -07:00
sandbox common: Discard the __u_boot_cmd section 2012-10-22 08:29:42 -07:00
sh sh: fix trigger_address_error() 2012-11-30 15:06:04 +09:00
sparc env: Use getenv_yesno() more generally 2012-12-13 11:46:55 -07:00
x86 x86: Build vga video code only if CONFIG_VIDEO_VGA is defined 2012-12-06 14:30:44 -08:00
.gitignore update include/asm/ gitignore after move 2010-05-07 00:17:30 +02:00