Android/Security: Difference between revisions

From OLPC
Jump to navigation Jump to search
(Created page with 'Firmware security for the Android and Sugar build. * set up for signing using Firmware security, * copy /boot/kernel and /boot/ramdisk from the Android build, * sign the And…')
 
No edit summary
Line 2: Line 2:


* set up for signing using [[Firmware security]],
* set up for signing using [[Firmware security]],
* copy /boot/kernel and /boot/ramdisk from the Android build,
* copy /boot/kernel and /boot/ramdisk from the [[Android]] build,
* sign the Android kernel
* sign the Android kernel
sign-os.sh os vmlinuz runos4.zip
sign-os.sh os vmlinuz runos4.zip
Line 12: Line 12:
ln -s ../runos4.zip actos4.zip
ln -s ../runos4.zip actos4.zip
ln -s ../actrd4.zip actrd4.zip
ln -s ../actrd4.zip actrd4.zip
* test booting using the O game key to select Android, or no O game key to select Sugar, using the X game key to enable security if it is not enabled.
* test booting using the [[Cheat codes|O game key]] to select Android, or no O game key to select Sugar, using the X game key to enable security if it is not enabled.


Removes the boot menu, because the boot menu is implemented in olpc.fth, and olpc.fth is not used during secure boot.
Removes the boot menu.

Revision as of 04:33, 8 April 2014

Firmware security for the Android and Sugar build.

  • set up for signing using Firmware security,
  • copy /boot/kernel and /boot/ramdisk from the Android build,
  • sign the Android kernel
sign-os.sh os vmlinuz runos4.zip
  • sign the Android ramdisk
sign-os.sh os initrd runrd4.zip
  • make a /boot/alt directory,
  • place both in /boot/alt,
  • link the activation mode to the Sugar activation kernel and ramdisk,
ln -s ../runos4.zip actos4.zip
ln -s ../actrd4.zip actrd4.zip
  • test booting using the O game key to select Android, or no O game key to select Sugar, using the X game key to enable security if it is not enabled.

Removes the boot menu, because the boot menu is implemented in olpc.fth, and olpc.fth is not used during secure boot.