Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

boot: zephyr: kconfig: Add new defaults option for FIH #2207

Merged
merged 1 commit into from
Feb 19, 2025
Merged

boot: zephyr: kconfig: Add new defaults option for FIH #2207

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
19 changes: 19 additions & 0 deletions boot/zephyr/Kconfig
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -729,6 +729,9 @@ config MEASURED_BOOT_MAX_CBOR_SIZE

choice BOOT_FAULT_INJECTION_HARDENING_PROFILE
prompt "Fault injection hardening profile"
default BOOT_FIH_PROFILE_HIGH if BOOT_FIH_PROFILE_DEFAULT_HIGH
default BOOT_FIH_PROFILE_MEDIUM if BOOT_FIH_PROFILE_DEFAULT_MEDIUM
default BOOT_FIH_PROFILE_LOW if BOOT_FIH_PROFILE_DEFAULT_LOW
default BOOT_FIH_PROFILE_OFF

config BOOT_FIH_PROFILE_OFF
Expand Down Expand Up @@ -1021,6 +1024,22 @@ endif # BOOT_DECOMPRESSION

endif # BOOT_DECOMPRESSION_SUPPORT

menu "Defaults"
# Items in this menu should not be manually set. These options are for modules/sysbuild to
# set as defaults to allow MCUboot's default configuration to be set, but still allow it
# to be overridden by users.

config BOOT_FIH_PROFILE_DEFAULT_LOW
bool "Default to low fault inject hardening level"

config BOOT_FIH_PROFILE_DEFAULT_MEDIUM
bool "Default to medium fault inject hardening level"

config BOOT_FIH_PROFILE_DEFAULT_HIGH
bool "Default to high fault inject hardening level"

endmenu

endmenu

config MCUBOOT_DEVICE_SETTINGS
Expand Down
Loading