Convert CONFIG_CMD_ESBC_VALIDATE to Kconfig

This converts the following to Kconfig:
   CONFIG_CMD_ESBC_VALIDATE

Signed-off-by: Simon Glass <sjg@chromium.org>
Reviewed-by: Tom Rini <trini@konsulko.com>

diff --git a/arch/arm/include/asm/fsl_secure_boot.h b/arch/arm/include/asm/fsl_secure_boot.h
index bd39b6e267ac85dc86276a7aab823bb7467fa5fb..2e3f520f479576944ecc48187223c18570e73bd8 100644 (file)
--- a/arch/arm/include/asm/fsl_secure_boot.h
+++ b/arch/arm/include/asm/fsl_secure_boot.h
@@ -8,7 +8,6 @@
 #define __FSL_SECURE_BOOT_H
 
 #ifdef CONFIG_CHAIN_OF_TRUST
-#define CONFIG_CMD_ESBC_VALIDATE
 #define CONFIG_FSL_SEC_MON
 
 #ifdef CONFIG_SPL_BUILD

diff --git a/arch/powerpc/include/asm/fsl_secure_boot.h b/arch/powerpc/include/asm/fsl_secure_boot.h
index 8f66fc5182d92734964db851a16e03e8b8076ac3..76921eea9a0393e29b5b804db24b38e3ff707960 100644 (file)
--- a/arch/powerpc/include/asm/fsl_secure_boot.h
+++ b/arch/powerpc/include/asm/fsl_secure_boot.h
@@ -99,7 +99,6 @@
 #define CONFIG_SPL_UBOOT_KEY_HASH      NULL
 #endif /* ifdef CONFIG_SPL_BUILD */
 
-#define CONFIG_CMD_ESBC_VALIDATE
 #define CONFIG_FSL_SEC_MON
 
 #ifndef CONFIG_SPL_BUILD

diff --git a/board/freescale/common/Kconfig b/board/freescale/common/Kconfig
index 540885786b8b7305ca660eda61fcc2e094d7b4a3..b4bf90d4f58ecb347dfefc4db5889b4384f646ba 100644 (file)
--- a/board/freescale/common/Kconfig
+++ b/board/freescale/common/Kconfig
@@ -7,3 +7,12 @@ config CHAIN_OF_TRUST
        select SHA_PROG_HW_ACCEL
        bool
        default y
+
+config CMD_ESBC_VALIDATE
+       bool "Enable the 'esbc_validate' and 'esbc_halt' commands"
+       default y if CHAIN_OF_TRUST
+       help
+         This option enables two commands used for secure booting:
+
+           esbc_validate - validate signature using RSA verification
+           esbc_halt - put the core in spin loop (Secure Boot Only)

diff --git a/scripts/config_whitelist.txt b/scripts/config_whitelist.txt
index 6a6bb27bb4b06a26790d35a2bdc48b5a9c3e2852..01e44eea4cf12c523f27783be7dd247740adf7ac 100644 (file)
--- a/scripts/config_whitelist.txt
+++ b/scripts/config_whitelist.txt
@@ -383,7 +383,6 @@ CONFIG_CM922T_XA10
 CONFIG_CMDLINE_EDITING
 CONFIG_CMDLINE_PS_SUPPORT
 CONFIG_CMDLINE_TAG
-CONFIG_CMD_ESBC_VALIDATE
 CONFIG_CMD_ETHSW
 CONFIG_CMD_FDC
 CONFIG_CMD_FDT_MAX_DUMP