From bc0dca204a1b38566a4960408904649747f8a61b Mon Sep 17 00:00:00 2001 From: Winter Wang Date: Wed, 7 Dec 2016 16:20:48 +0800 Subject: MA-9095 configs: enable 7d's avb using RPMB * use caam encrypted fastboot LOCK/UNLOCK for 7d; * add CONFIG_AVB_SUPPORT; as 7d doesn't have enough FUSE bits to store RPMB key, use the "fault" fuse bank size 0 to disable write/read to fuse, also not set CONFIG_AVB_FUSE to prevent any possiable key write to RPMB. Change-Id: I7d75d9bf465feada2b1204615da3c127c8f10b69 Signed-off-by: Winter Wang --- configs/mx7dsabresdbrillo_defconfig | 2 +- include/configs/mx7dsabresdbrillo.h | 13 +++++++++++++ 2 files changed, 14 insertions(+), 1 deletion(-) diff --git a/configs/mx7dsabresdbrillo_defconfig b/configs/mx7dsabresdbrillo_defconfig index 438fc3b..59eb4e1 100644 --- a/configs/mx7dsabresdbrillo_defconfig +++ b/configs/mx7dsabresdbrillo_defconfig @@ -1,4 +1,4 @@ -CONFIG_SYS_EXTRA_OPTIONS="IMX_CONFIG=board/freescale/mx7dsabresd/imximage.cfg,MX7D,ANDROID_SUPPORT,BRILLO_SUPPORT,EFI_PARTITION,FSL_BOOTCTL" +CONFIG_SYS_EXTRA_OPTIONS="IMX_CONFIG=board/freescale/mx7dsabresd/imximage.cfg,MX7D,ANDROID_SUPPORT,BRILLO_SUPPORT,EFI_PARTITION,AVB_SUPPORT" CONFIG_ARM=y CONFIG_TARGET_MX7DSABRESD=y CONFIG_SYS_MALLOC_F=y diff --git a/include/configs/mx7dsabresdbrillo.h b/include/configs/mx7dsabresdbrillo.h index 0d939f9..b0a5c38 100644 --- a/include/configs/mx7dsabresdbrillo.h +++ b/include/configs/mx7dsabresdbrillo.h @@ -20,6 +20,8 @@ #endif #endif +#define FASTBOOT_ENCRYPT_LOCK + #define CONFIG_FSL_CAAM_KB #define CONFIG_SHA1 #define CONFIG_SHA256 @@ -41,5 +43,16 @@ #define CONFIG_CMD_FS_GENERIC #define CONFIG_CMD_EXT4 +#ifdef CONFIG_AVB_SUPPORT +#define CONFIG_SUPPORT_EMMC_RPMB +/* fuse bank size in word */ +/* infact 7D have no enough bits + * set this size to 0 will disable + * program/read FUSE */ +#define CONFIG_AVB_FUSE_BANK_SIZEW 0 +#define CONFIG_AVB_FUSE_BANK_START 0 +#define CONFIG_AVB_FUSE_BANK_END 0 +#endif + #endif -- cgit v1.1