Secure Boot 무결성 보장을 위해 flash patch 비활성화(서명된 flash 코드만 실행)

- flash patch: 코드 일부를 다른 코드로 우회해서 실행 가능한 기능 - 출고용 보안
2026-07-13 13:55:16 +09:00
parent f24bb7ef69
commit fee9c08378
1 changed files with 2 additions and 0 deletions
@@ -92,6 +92,8 @@ CONFIG_BT_SMP_SC_ONLY=y
 CONFIG_BT_SETTINGS=y
 # Maximum number of stored bonded peers.
 CONFIG_BT_MAX_PAIRED=20
+# Production secure boot: disable flash patching so only signed flash code can run.
+CONFIG_DISABLE_FLASH_PATCH=y

 # ADC (battery)
 # Enable Zephyr ADC driver for battery voltage measurement.