[PATCH] common: Sconfig: fix help text of BOOT_UNSIGNED_IMAGES

[PATCH] common: Sconfig: fix help text of BOOT_UNSIGNED_IMAGES

[Ulrich Ölmann]

Enabling this option relaxes the requirements for boot artifacts. For secure
boot, however, it must be disabled unless signed images are enforced at build
time via CONFIG_BOOTM_FORCE_SIGNED_IMAGES.

Signed-off-by: Ulrich Ölmann <u.oelmann@pengutronix.de>
---
 common/Sconfig | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/common/Sconfig b/common/Sconfig
index b5c585b11b20..e5bfb63cfcb3 100644
--- a/common/Sconfig
+++ b/common/Sconfig
@@ -56,8 +56,8 @@ config BOOT_UNSIGNED_IMAGES
 	  Say y here if you want to allow booting of images with
 	  an invalid signature or no signature at all.
 
-	  Systems with verified boot chains should say y here
+	  Systems with verified boot chains should say n here
 	  or force it at compile time irrespective of policy
-	  with CONFIG_BOOTM_FORCE_SIGNED_IMAGES
+	  with CONFIG_BOOTM_FORCE_SIGNED_IMAGES.
 
 endmenu
-- 
2.47.3

Re: [PATCH] common: Sconfig: fix help text of BOOT_UNSIGNED_IMAGES

[Sascha Hauer]

On Tue, 08 Sep 2026 07:22:36 +0200, Ulrich Ölmann wrote:
> Enabling this option relaxes the requirements for boot artifacts. For secure
> boot, however, it must be disabled unless signed images are enforced at build
> time via CONFIG_BOOTM_FORCE_SIGNED_IMAGES.
> 
> 

Applied, thanks!

[1/1] common: Sconfig: fix help text of BOOT_UNSIGNED_IMAGES
      https://git.pengutronix.de/cgit/barebox/commit/?id=bc5aefa619f2 (link may not be stable)

Best regards,
-- 
Sascha Hauer <s.hauer@pengutronix.de>