imx: hab: Provide hab_auth_img_or_fail command
authorBryan O'Donoghue <bryan.odonoghue@linaro.org>
Mon, 26 Mar 2018 14:36:46 +0000 (15:36 +0100)
committerStefano Babic <sbabic@denx.de>
Sun, 15 Apr 2018 09:44:13 +0000 (11:44 +0200)
commit49e6242673615225a434df5bfad60a4720a7d88c
tree4993d278c00e9c94c6a8603a23e9fcda66ea6ef1
parentf4d8fccd3884ea8f76503966b14d0c25129e23eb
imx: hab: Provide hab_auth_img_or_fail command

This patch adds hab_auth_img_or_fail() a command line function that
encapsulates a common usage of authenticate and failover, namely if
authenticate image fails, then drop to BootROM USB recovery mode.

For secure-boot systems, this type of locked down behavior is important to
ensure no unsigned images can be run.

It's possible to script this logic but, when done over and over again the
environment starts get very complex and repetitive, reducing that script
repetition down to a command line function makes sense.

Signed-off-by: Bryan O'Donoghue <bryan.odonoghue@linaro.org>
Cc: Utkarsh Gupta <utkarsh.gupta@nxp.com>
Cc: Breno Lima <breno.lima@nxp.com>
Cc: Fabio Estevam <fabio.estevam@nxp.com>
Signed-off-by: Bryan O'Donoghue <bryan.odonoghue@linaro.org>
Tested-by: Breno Lima <breno.lima@nxp.com>
arch/arm/mach-imx/hab.c