smegw01: Fix inverted CONFIG_SYS_BOOT_LOCKED logic

CONFIG_SYS_BOOT_LOCKED means that a restricted boot environment will
be used. In this case, hab_auth_img_or_fail should be called to prevent
U-Boot to continue running when the fitImage authentication fails.

Fix the logic accordingly.

Additionally, select CONFIG_SYS_BOOT_LOCKED by default.

Signed-off-by: Eduard Strehlau <eduard@lionizers.com>
Signed-off-by: Fabio Estevam <festevam@denx.de>

diff --git a/board/storopack/smegw01/smegw01.env b/board/storopack/smegw01/smegw01.env
index 528310dd810ff940bee4c64f890fb1cd04e9ce24..93de8669109d906cc8cd3eab202af7185c909da7 100644 (file)
--- a/board/storopack/smegw01/smegw01.env
+++ b/board/storopack/smegw01/smegw01.env
@@ -67,9 +67,9 @@ mmcboot=
                run altbootcmd;
        fi;
 #ifdef CONFIG_SYS_BOOT_LOCKED
-       hab_auth_img ${fileaddr} ${filesize};
-#else
        hab_auth_img_or_fail ${fileaddr} ${filesize};
+#else
+       hab_auth_img ${fileaddr} ${filesize};
 #endif
        run mmcargs;
        if bootm; then

diff --git a/configs/smegw01_defconfig b/configs/smegw01_defconfig
index 616038387e27bb83d10a3bc346362e96e4b33cde..03d403ddc80f73502c940f5af15255dbe36f5ae2 100644 (file)
--- a/configs/smegw01_defconfig
+++ b/configs/smegw01_defconfig
@@ -7,7 +7,7 @@ CONFIG_ENV_OFFSET=0x100000
 CONFIG_DM_GPIO=y
 CONFIG_DEFAULT_DEVICE_TREE="imx7d-smegw01"
 CONFIG_TARGET_SMEGW01=y
-# CONFIG_SYS_BOOT_LOCKED is not set
+CONFIG_SYS_BOOT_LOCKED=y
 CONFIG_ENV_OFFSET_REDUND=0x110000
 CONFIG_ARMV7_BOOT_SEC_DEFAULT=y
 # CONFIG_ARMV7_VIRT is not set