diff options
| -rw-r--r-- | src/lib/Kconfig.cbfs_verification | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/lib/Kconfig.cbfs_verification b/src/lib/Kconfig.cbfs_verification index 12aaf81fab..6482e06b20 100644 --- a/src/lib/Kconfig.cbfs_verification +++ b/src/lib/Kconfig.cbfs_verification @@ -25,7 +25,7 @@ config TOCTOU_SAFETY depends on !NO_FMAP_CACHE depends on !NO_CBFS_MCACHE depends on !USE_OPTION_TABLE && !FSP_CAR # Known to access CBFS before CBMEM init - depends on !VBOOT # TODO: can only allow this once vboot fully integrated + depends on !VBOOT || VBOOT_CBFS_INTEGRATION depends on NO_XIP_EARLY_STAGES help Say yes here to eliminate time-of-check vs. time-of-use vulnerabilities |