From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Tue, 25 Mar 2025 10:17:58 +0100 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1tx0Q2-003x9H-1m for lore@lore.pengutronix.de; Tue, 25 Mar 2025 10:17:57 +0100 Received: from localhost ([127.0.0.1] helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1tx0Q1-0006uh-2R; Tue, 25 Mar 2025 10:17:57 +0100 Received: from ptz.office.stw.pengutronix.de ([2a0a:edc0:0:900:1d::77] helo=[127.0.0.1]) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1tx0Pv-0006uP-GA; Tue, 25 Mar 2025 10:17:51 +0100 Message-ID: <1e14eaf9-ef9f-46ed-85f3-67caa3fd4ccb@pengutronix.de> Date: Tue, 25 Mar 2025 10:17:50 +0100 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird To: Robert Schwebel References: <20241213095955.3308105-1-a.fatoum@pengutronix.de> <791fbb47-5af2-4d9a-a67b-022e6c96a94e@pengutronix.de> Content-Language: en-US, de-DE, de-BE From: Ahmad Fatoum In-Reply-To: Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Subject: Re: [DistroKit] [PATCH] reason: silence reason warning about CFG_INSECURE being set X-BeenThere: distrokit@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: DistroKit Mailinglist List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: Michael Olbrich , distrokit@pengutronix.de Sender: "DistroKit" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: distrokit-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false Hello Robert, On 3/25/25 07:42, Robert Schwebel wrote: > On Mon, Mar 24, 2025 at 07:40:37PM +0100, Ahmad Fatoum wrote: >> With the v2025.03 bump now in next, can you cherry-pick this patch >> to next as well? > > Must have missed this, I've added the snippet to next and the warning is > gone. Please have a look if I did it right. The patch became only relevant with the upgrade to PTXdist >= v2025.01.0. The applied patch to next looks fine. Thanks, Ahmad > > rsc > >>>>> diff --git a/configs/platform-v7a/bsp.ref b/configs/platform-v7a/bsp.ref >>>>> index 169e555df53a..bda4db20af2c 100644 >>>>> --- a/configs/platform-v7a/bsp.ref >>>>> +++ b/configs/platform-v7a/bsp.ref >>>>> @@ -9,4 +9,12 @@ optee_disabled_features: >>>>> - CFG_ENABLE_EMBEDDED_TESTS >>>>> - CFG_TEE_CORE_TA_TRACE >>>>> >>>>> +optee_security_warning_disabled: >>>>> + description: | >>>>> + OP-TEE is used as secure monitor on STM32MP13x providing power >>>>> + management and clock/reset control support. We don't use it as >>>>> + part of a trusted boot setup, so it's apt for OP-TEE to warn >>>>> + about this at startup and thus we'll keep CFG_INSECURE enabled. >>>>> + value: True >>>>> + >>>>> # vim: filetype=yaml shiftwidth=2 expandtab >