On Mon, 12 Oct 2026 22:25:04 +0200, Igor Opaniuk <[email protected]> wrote: > The OP-TEE AVB TA stores the device lock state > (TA_AVB_CMD_READ/WRITE_LOCK_STATE) but U-Boot only ever read it, so a > device backed by the TA could never leave the unlocked (orange) state from > the bootloader. Add avb lock and avb unlock, which set the state through a > new avb_write_lock_state() helper. As documented by the TA, changing the > state resets all rollback indexes. > > [...]
Reviewed-by: Guillaume La Roque <[email protected]> -- Guillaume La Roque <[email protected]>
