From: Anshul Dalal <anshuld@ti.com>
Date: Fri, 24 Oct 2025 08:14:04 +0000 (+0530)
Subject: spl: Kconfig: allow falcon mode for TI secure devices
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=16f412679005e539401308bb075d4cdf87f01cb2;p=thirdparty%2Fu-boot.git

spl: Kconfig: allow falcon mode for TI secure devices

Falcon mode was disabled for TI_SECURE_DEVICE at commit e95b9b4437bc
("ti_armv7_common: Disable Falcon Mode on HS devices") for older 32-bit
HS devices and but can now be enabled with the addition of
OS_BOOT_SECURE.

For secure boot, the kernel with x509 headers can be packaged in a fit
container (fitImage) signed with TIFS keys for authentication.

Signed-off-by: Anshul Dalal <anshuld@ti.com>
---

diff --git a/common/spl/Kconfig b/common/spl/Kconfig
index 6027f24b1fe..9edea35e26a 100644
--- a/common/spl/Kconfig
+++ b/common/spl/Kconfig
@@ -1202,7 +1202,7 @@ config SPL_ONENAND_SUPPORT
 
 config SPL_OS_BOOT
 	bool "Activate Falcon Mode"
-	depends on !TI_SECURE_DEVICE
+	select SPL_OS_BOOT_SECURE if TI_SECURE_DEVICE
 	depends on ARM || MICROBLAZE || PPC
 	help
 	  Enable booting directly to an OS from SPL.