diff options
| author | Nick Bofferding <bofferdn@us.ibm.com> | 2017-03-24 18:05:05 -0500 |
|---|---|---|
| committer | Daniel M. Crowell <dcrowell@us.ibm.com> | 2017-04-18 14:28:13 -0400 |
| commit | 6ca6f4a6132dbe85e4ed924d9bab026866d74b36 (patch) | |
| tree | 1492ee18fb4ac3a05b6d470aed52a4dc5ace6229 /src/build/buildpnor/genPnorImages.pl | |
| parent | e9397549d8d9e2b2cd8a2e1d4af6dfa81c0b9ec2 (diff) | |
| download | talos-hostboot-6ca6f4a6132dbe85e4ed924d9bab026866d74b36.tar.gz talos-hostboot-6ca6f4a6132dbe85e4ed924d9bab026866d74b36.zip | |
Support targeting image (HBD) signing
- Enabled HBD signing in genPnorImages
- Distribute HB specific targeting protected/unprotected payloads
- Generate protected / unprotected parts of targeting in attribute compiler
- Stop using attribute compiler version header generation
- Add secure headers via build directives
Change-Id: I2257532f022d5c4524a2aacafa17907199cd8776
RTC: 167774
Reviewed-on: http://ralgit01.raleigh.ibm.com/gerrit1/38458
Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com>
Tested-by: Jenkins OP Build CI <op-jenkins+hostboot@us.ibm.com>
Reviewed-by: Stephen M. Cprek <smcprek@us.ibm.com>
Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com>
Reviewed-by: Marshall J. Wilks <mjwilks@us.ibm.com>
Reviewed-by: Michael Baiocchi <mbaiocch@us.ibm.com>
Reviewed-by: Daniel M. Crowell <dcrowell@us.ibm.com>
Diffstat (limited to 'src/build/buildpnor/genPnorImages.pl')
| -rwxr-xr-x | src/build/buildpnor/genPnorImages.pl | 7 |
1 files changed, 4 insertions, 3 deletions
diff --git a/src/build/buildpnor/genPnorImages.pl b/src/build/buildpnor/genPnorImages.pl index 7d07bb7fb..8ad102eab 100755 --- a/src/build/buildpnor/genPnorImages.pl +++ b/src/build/buildpnor/genPnorImages.pl @@ -509,9 +509,10 @@ sub manipulateImages #|| ($eyeCatch eq "CAPP") #|| ($eyeCatch eq "BOOTKERNEL"); - my $isSpecialSecure = ($eyeCatch eq "HBB"); - #|| ($eyeCatch eq "HBI") - #|| ($eyeCatch eq "HBD"); + my $isSpecialSecure = ($eyeCatch eq "HBB") + || ($eyeCatch eq "HBD"); + #|| ($eyeCatch eq "HBBL") + #|| ($eyeCatch eq "HBI") my $openSigningFlags = OP_SIGNING_FLAG.$sb_hdrs{DEFAULT}{flags}; my $secureboot_hdr = $sb_hdrs{DEFAULT}{file}; |
