| Daisuke Nojiri | 742fc8d | 2014-10-10 10:51:06 -0700 | [diff] [blame] | 1 | ## This file is part of the coreboot project. |
| 2 | ## |
| 3 | ## Copyright (C) 2014 The ChromiumOS Authors. All rights reserved. |
| 4 | ## |
| 5 | ## This program is free software; you can redistribute it and/or modify |
| 6 | ## it under the terms of the GNU General Public License as published by |
| 7 | ## the Free Software Foundation; version 2 of the License. |
| 8 | ## |
| 9 | ## This program is distributed in the hope that it will be useful, |
| 10 | ## but WITHOUT ANY WARRANTY; without even the implied warranty of |
| 11 | ## MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
| 12 | ## GNU General Public License for more details. |
| 13 | ## |
| 14 | ## You should have received a copy of the GNU General Public License |
| 15 | ## along with this program; if not, write to the Free Software |
| 16 | ## Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA |
| 17 | ## |
| 18 | |
| Daisuke Nojiri | 5d302c7 | 2015-04-09 08:18:22 -0700 | [diff] [blame] | 19 | config VBOOT2_MOCK_SECDATA |
| 20 | bool "Mock secdata for firmware verification" |
| 21 | default n |
| Aaron Durbin | 1124cec | 2015-04-22 10:41:42 -0500 | [diff] [blame] | 22 | depends on VBOOT_VERIFY_FIRMWARE |
| Daisuke Nojiri | 5d302c7 | 2015-04-09 08:18:22 -0700 | [diff] [blame] | 23 | help |
| 24 | Enabling VBOOT2_MOCK_SECDATA will mock secdata for the firmware |
| 25 | verification to avoid access to a secdata storage (typically TPM). |
| 26 | All operations for a secdata storage will be successful. This option |
| 27 | can be used during development when a TPM is not present or broken. |
| 28 | THIS SHOULD NOT BE LEFT ON FOR PRODUCTION DEVICES. |
| 29 | |
| Daisuke Nojiri | 742fc8d | 2014-10-10 10:51:06 -0700 | [diff] [blame] | 30 | config RETURN_FROM_VERSTAGE |
| 31 | bool "return from verstage" |
| 32 | default n |
| Aaron Durbin | 1124cec | 2015-04-22 10:41:42 -0500 | [diff] [blame] | 33 | depends on VBOOT_VERIFY_FIRMWARE |
| Daisuke Nojiri | 742fc8d | 2014-10-10 10:51:06 -0700 | [diff] [blame] | 34 | help |
| 35 | If this is set, the verstage returns back to the bootblock instead of |
| 36 | exits to the romstage so that the verstage space can be reused by the |
| 37 | romstage. Useful if a ram space is too small to fit both the verstage |
| 38 | and the romstage. |
| 39 | |
| Vadim Bendebury | 30773d2 | 2015-03-20 16:11:13 -0700 | [diff] [blame] | 40 | config VBOOT_DISABLE_DEV_ON_RECOVERY |
| 41 | bool "Disable dev mode on recovery requests" |
| 42 | default n |
| Aaron Durbin | 1124cec | 2015-04-22 10:41:42 -0500 | [diff] [blame] | 43 | depends on VBOOT_VERIFY_FIRMWARE |
| Vadim Bendebury | 30773d2 | 2015-03-20 16:11:13 -0700 | [diff] [blame] | 44 | help |
| 45 | When this option is enabled, the Chrome OS device leaves the |
| 46 | developer mode as soon as recovery request is detected. This is |
| 47 | handy on embedded devices with limited input capabilities. |
| Patrick Georgi | efc6aa0 | 2015-04-27 18:13:50 +0200 | [diff] [blame] | 48 | |
| 49 | config VERSTAGE_IN_BOOTBLOCK |
| 50 | bool |
| 51 | default n |
| Aaron Durbin | 1124cec | 2015-04-22 10:41:42 -0500 | [diff] [blame] | 52 | depends on VBOOT_VERIFY_FIRMWARE |
| Patrick Georgi | efc6aa0 | 2015-04-27 18:13:50 +0200 | [diff] [blame] | 53 | |
| 54 | config SEPARATE_VERSTAGE |
| 55 | bool |
| 56 | default !VERSTAGE_IN_BOOTBLOCK |
| Aaron Durbin | 1124cec | 2015-04-22 10:41:42 -0500 | [diff] [blame] | 57 | depends on VBOOT_VERIFY_FIRMWARE |