New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add CONFIG_MCUBOOT_BOOTLOADER_NO_DOWNGRADE to MCUboot module #63053
Add CONFIG_MCUBOOT_BOOTLOADER_NO_DOWNGRADE to MCUboot module #63053
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
What would be good for this is if an option was added to sysbuild so that it could enable the option in MCUboot automatically
doc/releases/release-notes-3.5.rst
Outdated
@@ -353,6 +353,11 @@ HALs | |||
MCUboot | |||
******* | |||
|
|||
* Added :kconfig:option:`CONFIG_MCUBOOT_BOOTLOADER_MODE_WITH_DOWNGRADE_PREVENTION` | |||
that allows to inform application that the on-board MCUboot has been configured | |||
with download prevention enabled. This option is automatically selected for |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
*downgrade
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Fixed
69c2928
to
8ae6e69
Compare
bool | ||
help | ||
Selected mode supports downgrade prevention, where you can not switch to | ||
Selected mode supports downgrade prevention, where you cannot switch to |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Duplicated line
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Fixed
@@ -353,6 +353,11 @@ HALs | |||
MCUboot | |||
******* | |||
|
|||
* Added :kconfig:option:`CONFIG_MCUBOOT_BOOTLOADER_MODE_WITH_DOWNGRADE_PREVENTION` | |||
that allows to inform application that the on-board MCUboot has been configured | |||
with downgrade prevention enabled. This option is automatically selected for |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
double space
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Fixed
8ae6e69
to
c834007
Compare
modules/Kconfig.mcuboot
Outdated
|
||
endchoice # MCUBOOT_BOOTLOADER_MODE | ||
|
||
config MCUBOOT_BOOTLOADER_MODE_SUPPORTS_DOWNGRADE_PREVENTION |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
MCUBOOT_BOOTLOADER_MODE_HAS_NO_DOWNGRADE
modules/Kconfig.mcuboot
Outdated
an application with lower version than the currently running application. | ||
|
||
if MCUBOOT_BOOTLOADER_MODE_SUPPORTS_DOWNGRADE_PREVENTION | ||
config MCUBOOT_BOOTLOADER_MODE_WITH_DOWNGRADE_PREVENTION |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
MCUBOOT_BOOTLOADER_NO_DOWNGRADE
c834007
to
9fc4482
Compare
Add the MCUBOOT_BOOTLOADER_NO_DOWNGRADE Kconfig option that allows, when paired with MCUboot mode Kconfig, to indicate that the MCUboot has been configured with downgrade prevention, which means that only application with version higher than running can be swapped on next boot. Signed-off-by: Dominik Ermel <dominik.ermel@nordicsemi.no>
Adds note on addition of MCUBOOT_BOOTLOADER_MODE_WITH_DOWNGRADE_PREVENTION to MCUboot Kconfig module. Signed-off-by: Dominik Ermel <dominik.ermel@nordicsemi.no>
9fc4482
to
89a7b24
Compare
No description provided.