diff options
| author | Randall Spangler <rspangler@chromium.org> | 2012-05-25 14:57:09 -0700 |
|---|---|---|
| committer | Randall Spangler <rspangler@chromium.org> | 2012-05-25 15:03:47 -0700 |
| commit | 7ecd1d6d3c23b6acb13f90062d062647ddb4fed3 (patch) | |
| tree | 796393a5afc4290d974f4ab391a0003c72c3056e /board/bds | |
| parent | e704c712ad473160e97717f139ab3929bcd249c1 (diff) | |
| download | chrome-ec-7ecd1d6d3c23b6acb13f90062d062647ddb4fed3.tar.gz | |
Add system_is_locked() to prevent sysjump on consumer systems
This returns true when both HW and SW write protect are enabled.
Once WP is enabled, sysjump will be locked out.
system_is_locked() can be used to gate other dangerous-ish commands too.
Signed-off-by: Randall Spangler <rspangler@chromium.org>
BUG=chrome-os-partner:7468
TEST=manual
sysinfo -> unlocked, copy A
sysjump B -> works
flashwp lock
reboot
(make sure flashinfo shows WP asserted and flash locked; note there is a
HW bug on proto1 which makes this flaky)
sysinfo -> locked, copy A
sysjump B -> fails
(remove WP screw)
reboot hard
flashwp unlock
Change-Id: I849b573675c2c1cb4c44b9a05d6973e38247ca23
Diffstat (limited to 'board/bds')
| -rw-r--r-- | board/bds/board.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/board/bds/board.h b/board/bds/board.h index f22b1e8603..f9d1ef7751 100644 --- a/board/bds/board.h +++ b/board/bds/board.h @@ -10,6 +10,7 @@ /* Optional features */ #define CONFIG_CONSOLE_CMDHELP +#define CONFIG_SYSTEM_UNLOCKED /* Allow dangerous commands */ enum adc_channel { |