Skip to content

Commit

Permalink
[README] added U-Boot config filter section
Browse files Browse the repository at this point in the history
  • Loading branch information
Manish Kumar authored and iancampbell committed Oct 24, 2022
1 parent 442d186 commit 32b392e
Showing 1 changed file with 23 additions and 0 deletions.
23 changes: 23 additions & 0 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -283,6 +283,29 @@ VIGILES_KERNEL_CONFIG = "/projects/kernel/linux-4.14-ts+imx-1.0/.config"
```


### U-Boot Config Filter

The Vigiles CVE Scanner can be configured to upload a U-Boot _.config_ file to LinuxLink along with the image manifest. This filter will reduce the number of U-Boot CVEs reported by removing those related to features which are not being built for your U-Boot. There are 2 ways to enable this feature -- Automatic Detection or Manual Specification

* Automatic Detection

This will use the _.config_ for the U-Boot specified in ```PREFERRED_PROVIDER_virtual/bootloader``` once the Yocto task ```do_configure``` is executed.


```
VIGILES_UBOOT_CONFIG = "auto"
```


* Manual Specification

**NOTE: This must be a _full_ U-Boot config, not a defconfig!**

```
VIGILES_UBOOT_CONFIG = "</projects/uboot/uboot-2020.04/.config>"
```


### Specifying a LinuxLink Key File

Full CVE reporting requires a LinuxLink License Key, though the Vigiles CVE Scanner will still execute in
Expand Down

0 comments on commit 32b392e

Please sign in to comment.