Attention is currently required from: Leah Rowe. Hello build bot (Jenkins),
I'd like you to reexamine a change. Please visit
https://review.coreboot.org/c/coreboot/+/51144
to look at the new patch set (#2).
Change subject: util/chromeos: Use the same inventory each time and verify checksums ......................................................................
util/chromeos: Use the same inventory each time and verify checksums
Coreboot wasn't doing any integrity checks. Furthermore, the latest inventory file from Google was always being used, which meant that it was not certain which version would be used.
This commit uses a version of the inventory from archive.org, verifies its checksum and then, using sha1 checksums defined inside the inventory file, verifies the checksums of recovery images.
This is obviously a huge boon to security and reliability.
Change-Id: If0166518d252a36d8f9a9c17d375fbdd9e3116f6 Signed-off-by: Leah Rowe leah@retroboot.org --- M util/chromeos/crosfirmware.sh 1 file changed, 50 insertions(+), 22 deletions(-)
git pull ssh://review.coreboot.org:29418/coreboot refs/changes/44/51144/2