From: Ahmad Fatoum <a.fatoum@barebox.org>
To: barebox@lists.infradead.org
Cc: Ahmad Fatoum <a.fatoum@barebox.org>
Subject: [PATCH] commands: add dedicated security menu
Date: Thu, 26 Jun 2025 13:23:01 +0200 [thread overview]
Message-ID: <20250626112301.363955-1-a.fatoum@barebox.org> (raw)
Instead of lumping commands like keystore and blobgen with misc
utilities like 2048, add a dedicated security menu for them.
Signed-off-by: Ahmad Fatoum <a.fatoum@barebox.org>
---
commands/Kconfig | 54 +++++++++++++++++++++++++-----------------------
1 file changed, 28 insertions(+), 26 deletions(-)
diff --git a/commands/Kconfig b/commands/Kconfig
index 23cb6d6b7832..6c61bff1cd12 100644
--- a/commands/Kconfig
+++ b/commands/Kconfig
@@ -2323,15 +2323,7 @@ config CMD_HAB
# end Hardware manipulation commands
endmenu
-
-
-menu "Miscellaneous"
-
-config CMD_2048
- tristate
- prompt "2048"
- help
- Console version of the game "2048" for GNU/Linux
+menu "Security"
config CMD_AVB_PVALUE
depends on OPTEE_AVB_PERSISTENT_VALUES
@@ -2345,6 +2337,33 @@ config CMD_AVB_PVALUE
that must be tamper evident and allows AVB to store arbitrary key-value
pairs.
+config CMD_BLOBGEN
+ bool
+ select BLOBGEN
+ prompt "blobgen"
+ help
+ Provides the "blobgen" command. This command encrypts and decrypts
+ plaintext to/from blobs. This is done with hardware crypto engines,
+ so this command is only useful when you also enable a blobgen capable
+ driver.
+
+config CMD_KEYSTORE
+ depends on CRYPTO_KEYSTORE
+ bool
+ prompt "keystore"
+ help
+ keystore provides access to the barebox keystore.
+
+# end Security commands
+endmenu
+
+menu "Miscellaneous"
+
+config CMD_2048
+ tristate
+ prompt "2048"
+ help
+ Console version of the game "2048" for GNU/Linux
config CMD_BAREBOX_UPDATE
tristate
@@ -2362,16 +2381,6 @@ config CMD_BAREBOX_UPDATE
-y autom. use 'yes' when asking confirmations
-f LEVEL set force level
-config CMD_BLOBGEN
- bool
- select BLOBGEN
- prompt "blobgen"
- help
- Provides the "blobgen" command. This command encrypts and decrypts
- plaintext to/from blobs. This is done with hardware crypto engines,
- so this command is only useful when you also enable a blobgen capable
- driver.
-
config CMD_FIRMWARELOAD
bool
select FIRMWARE
@@ -2389,13 +2398,6 @@ config CMD_KALLSYMS
Usage: kallsyns [SYMBOL | ADDRESS]
-config CMD_KEYSTORE
- depends on CRYPTO_KEYSTORE
- bool
- prompt "keystore"
- help
- keystore provides access to the barebox keystore.
-
config CMD_LINUX_EXEC
bool "linux exec"
depends on SANDBOX
--
2.39.5
reply other threads:[~2025-06-26 12:13 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20250626112301.363955-1-a.fatoum@barebox.org \
--to=a.fatoum@barebox.org \
--cc=barebox@lists.infradead.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox