From 8cda2bbb959c44c24c2e21e70e1595bf645550fa Mon Sep 17 00:00:00 2001 From: SGCMarkus Date: Tue, 15 Feb 2022 14:14:30 +0100 Subject: [PATCH] sm8250-common: set verified boot flags --- BoardConfigCommon.mk | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/BoardConfigCommon.mk b/BoardConfigCommon.mk index 7a782ef..038e4d4 100644 --- a/BoardConfigCommon.mk +++ b/BoardConfigCommon.mk @@ -96,3 +96,13 @@ BOARD_FLASH_BLOCK_SIZE := 262144 # (BOARD_KERNEL_PAGESIZE * 64) TARGET_COPY_OUT_PRODUCT := product TARGET_COPY_OUT_SYSTEM_EXT := system_ext TARGET_COPY_OUT_VENDOR := vendor + +# Verified Boot +BOARD_AVB_ENABLE := true +BOARD_AVB_MAKE_VBMETA_IMAGE_ARGS += --set_hashtree_disabled_flag +BOARD_AVB_MAKE_VBMETA_IMAGE_ARGS += --flags 2 +BOARD_AVB_VBMETA_SYSTEM := system system_ext +BOARD_AVB_VBMETA_SYSTEM_KEY_PATH := external/avb/test/data/testkey_rsa2048.pem +BOARD_AVB_VBMETA_SYSTEM_ALGORITHM := SHA256_RSA2048 +BOARD_AVB_VBMETA_SYSTEM_ROLLBACK_INDEX := $(PLATFORM_SECURITY_PATCH_TIMESTAMP) +BOARD_AVB_VBMETA_SYSTEM_ROLLBACK_INDEX_LOCATION := 1