Allowing to boot a non-encrypted rootfs when encryption is enable is a security hole: if an attacker can somehow write (offline) to the media, he could flash a custom unencrypted rootfs and break into the system. If the system is configured to use encryption, only encrypted rootfs will boot. Trying to boot a non-encrypted rootfs will fail and power off the device. https://jira.digi.com/browse/DEL-3829 Signed-off-by: Tatiana Leon <tatiana.leon@digi.com> |
||
|---|---|---|
| .. | ||
| trustfence-initramfs | ||
| trustfence-initramfs.bb | ||
| trustfence-tool_2.0.bb | ||