diff options
author | Duncan Laurie <dlaurie@google.com> | 2018-04-12 10:20:16 -0700 |
---|---|---|
committer | chrome-bot <chrome-bot@chromium.org> | 2018-04-17 15:47:13 -0700 |
commit | 534194ead77895dd131ed59b968b21a2ae36f133 (patch) | |
tree | 28506beacf01d948e008b903b21e2b27e41a9e92 /utility/crossystem.c | |
parent | f2a16b86fa1830e425fa66923b8ed3e2099b955d (diff) | |
download | vboot-534194ead77895dd131ed59b968b21a2ae36f133.tar.gz |
Add new NV and GBB flag to control UDC
This change adds a new NV and GBB flag for controlling USB device
mode behavior, adding an additional step to enable UDC on systems
that support it.
Users of this feature will need to first enable developer mode and
then enable UDC separately by running "crossystem dev_enable_udc=1".
Alternatively those without write protect enabled can set a GBB
flag to have UDC enabled by default while in developer mode.
This is based on the security reviewed proposal at
https://docs.google.com/document/d/1b6avd9xvhvljN_NKtctWrClj4mSYZ_uPmp7MmAnPwqs
BUG=b:74339386
BRANCH=poppy
TEST=manual testing on Eve device
Change-Id: I6f440320f28b033639b53246d3034bc8acc37a33
Signed-off-by: Duncan Laurie <dlaurie@google.com>
Reviewed-on: https://chromium-review.googlesource.com/1010769
Reviewed-by: Randall Spangler <rspangler@chromium.org>
Reviewed-by: Furquan Shaikh <furquan@chromium.org>
Diffstat (limited to 'utility/crossystem.c')
-rw-r--r-- | utility/crossystem.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/utility/crossystem.c b/utility/crossystem.c index 825b58b0..82ee9d79 100644 --- a/utility/crossystem.c +++ b/utility/crossystem.c @@ -50,6 +50,7 @@ const Param sys_param_list[] = { "Enable developer mode boot only from official kernels (writable)"}, {"dev_default_boot", IS_STRING|CAN_WRITE, "default boot from disk, legacy or usb (writable)"}, + {"dev_enable_udc", CAN_WRITE, "Enable USB Device Controller"}, {"devsw_boot", 0, "Developer switch position at boot"}, {"devsw_cur", 0, "Developer switch current position"}, {"disable_dev_request", CAN_WRITE, "Disable virtual dev-mode on next boot"}, |