mirror of
git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
synced 2025-08-05 16:54:27 +00:00

Adds support in the OP-TEE drivers (both SMC and FF-A ABIs) to probe and use an RPMB device via the RPMB subsystem instead of passing the RPMB frames via tee-supplicant in user space. A fallback mechanism is kept to route RPMB frames via tee-supplicant if the RPMB subsystem isn't available. The OP-TEE RPC ABI is extended to support iterating over all RPMB devices until one is found with the expected RPMB key already programmed. Signed-off-by: Jens Wiklander <jens.wiklander@linaro.org> Tested-by: Manuel Traut <manut@mecka.net> Reviewed-by: Sumit Garg <sumit.garg@linaro.org> Link: https://lore.kernel.org/r/20240814153558.708365-5-jens.wiklander@linaro.org Signed-off-by: Ulf Hansson <ulf.hansson@linaro.org>
15 lines
711 B
Text
15 lines
711 B
Text
What: /sys/class/tee/tee{,priv}X/rpmb_routing_model
|
|
Date: May 2024
|
|
KernelVersion: 6.10
|
|
Contact: op-tee@lists.trustedfirmware.org
|
|
Description:
|
|
RPMB frames can be routed to the RPMB device via the
|
|
user-space daemon tee-supplicant or the RPMB subsystem
|
|
in the kernel. The value "user" means that the driver
|
|
will route the RPMB frames via user space. Conversely,
|
|
"kernel" means that the frames are routed via the RPMB
|
|
subsystem without assistance from tee-supplicant. It
|
|
should be assumed that RPMB frames are routed via user
|
|
space if the variable is absent. The primary purpose
|
|
of this variable is to let systemd know whether
|
|
tee-supplicant is needed in the early boot with initramfs.
|