zephyr/scripts/kconfig/hardened.csv at 93a377e67492ee0c41a7039e13f771c0f5db518e

Joakim Andersson 25787e2df6 tfm: Harded build against TF-M built with unsecure keys

Introduce Kconfig option in zephyr build system that reflects the TF-M
cmake config variable with the same default value for dummy provisioning
and have it satisfy the IAK present requirement.
This configuration is not suitable for production, and by having this
in zephyr configuration we can have this as part of the hardened
configuration check.

Signed-off-by: Joakim Andersson <joakim.andersson@nordicsemi.no>

2023-12-12 19:08:46 +01:00

3.4 KiB

Raw Blame History

1	BOOT_BANNER	n
2	BOOT_DELAY	0
3	BOUNDS_CHECK_BYPASS_MITIGATION	y
4	BT_CONN_DISABLE_SECURITY	n
5	BT_DEBUG_KEYS	n
6	BT_DEBUG_SMP	n
7	BT_FIXED_PASSKEY	n
8	BT_LOG_SNIFFER_INFO	n
9	BT_OOB_DATA_FIXED	n
10	BT_SMP_ENFORCE_MITM	y
11	BT_STORE_DEBUG_KEYS	n
12	BT_TESTING	n
13	BT_USE_DEBUG_KEYS	n
14	BUILD_OUTPUT_STRIPPED	y
15	BUILTIN_STACK_GUARD	y
16	CORTEX_M_DEBUG_MONITOR_HOOK	n
17	DMA_INTEL_ADSP_GPDMA_DEBUG	n
18	ESPI_PERIPHERAL_DEBUG_PORT_80	n
19	ETH_E1000_VERBOSE_DEBUG	n
20	ETH_MCUX_PHY_EXTRA_DEBUG	n
21	EXECUTE_XOR_WRITE	y
22	FAULT_DUMP	0
23	HW_STACK_PROTECTION	y
24	INIT_STACKS	n
25	LOG	n
26	MODEM_CONTEXT_VERBOSE_DEBUG	n
27	MPU_STACK_GUARD	y
28	OVERRIDE_FRAME_POINTER_DEFAULT	y
29	SHELL	n
30	SOC_ATMEL_SAME70_DISABLE_ERASE_PIN	y
31	SOC_ATMEL_SAME70_WAIT_MODE	n
32	SOC_MEC1501_DEBUG_DISABLED	y
33	STACK_CANARIES	y
34	STACK_POINTER_RANDOM	100
35	STACK_SENTINEL	y
36	STATS	n
37	TEST	n
38	TEST_RANDOM_GENERATOR	n
39	TEST_SHELL	n
40	TEST_USERSPACE	n
41	TFM_CMAKE_BUILD_TYPE_DEBUG	n
42	TFM_DUMMY_PROVISIONING	n
43	THREAD_MONITOR	n
44	THREAD_NAME	n
45	TIMER_RANDOM_GENERATOR	n
46	TRACING	n
47	X86_MMU	y
48	ZTEST	n
49	ASSERT	n
50	DEBUG	n
51	DEBUG_INFO	n
52	DEBUG_THREAD_INFO	n
53	EARLY_CONSOLE	n
54	EXCEPTION_DEBUG	n
55	GDBSTUB	n
56	PRINTK	n
57	STACK_USAGE	n
58	THREAD_ANALYZER	n

3.4 KiB Raw Blame History

3.4 KiB

Raw Blame History