Skip to content

uEnv can bypass verified boot #17

@Ham22

Description

@Ham22

The proof of concept boots using uboot scripting and environment variables. Currently these variables are writable meaning that someone could easily bypass verified boot by running a few simple commands.

We need to either lock down the uEnv to RO (some things might break if we do this) or modify the verified boot mechanism so that security is not effected by env variables.

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions