diff mbox series

ARM: imx_v6_v7_defconfig: enable OP-TEE

Message ID 1515145235-12062-1-git-send-email-peng.fan@nxp.com
State New
Headers show
Series ARM: imx_v6_v7_defconfig: enable OP-TEE | expand

Commit Message

Peng Fan Jan. 5, 2018, 9:40 a.m. UTC 
This patch enables configs for Trusted Execution Environment(TEE) and
Open Portable Trusted Execution Environment(OP-TEE).

With Linux running in Trustzone non-secure world, OP-TEE OS runs in
secure world, linux could use secure services provided by OP-TEE.
With TEE/OP-TEE options selected, use the bindings
in Documentation/devicetree/bindings/arm/firmware/linaro,optee-tz.txt
to let the driver probe work.

On i.MX6/7, now the bootflow is U-Boot->OP-TEE->Linux, OP-TEE will
automatically create that node.

Signed-off-by: Peng Fan <peng.fan@nxp.com>
---

V1:
 Tested on i.MX7D-SDB with/without OP-TEE OS.
 OP-TEE needs https://github.com/OP-TEE/optee_os/pull/2052

 arch/arm/configs/imx_v6_v7_defconfig | 2 ++
 1 file changed, 2 insertions(+)

Comments

Peng Fan Jan. 24, 2018, 1:31 a.m. UTC | #1 
Hi,

On Fri, Jan 05, 2018 at 05:40:35PM +0800, Peng Fan wrote:
>This patch enables configs for Trusted Execution Environment(TEE) and
>Open Portable Trusted Execution Environment(OP-TEE).
>
>With Linux running in Trustzone non-secure world, OP-TEE OS runs in
>secure world, linux could use secure services provided by OP-TEE.
>With TEE/OP-TEE options selected, use the bindings
>in Documentation/devicetree/bindings/arm/firmware/linaro,optee-tz.txt
>to let the driver probe work.
>
>On i.MX6/7, now the bootflow is U-Boot->OP-TEE->Linux, OP-TEE will
>automatically create that node.
>
>Signed-off-by: Peng Fan <peng.fan@nxp.com>
>---
>
>V1:
> Tested on i.MX7D-SDB with/without OP-TEE OS.
> OP-TEE needs https://github.com/OP-TEE/optee_os/pull/2052

This OP-TEE OS change has been merged.

Any comments on this patch to enable linux side driver?

Thanks,
Peng.

>
> arch/arm/configs/imx_v6_v7_defconfig | 2 ++
> 1 file changed, 2 insertions(+)
>
>diff --git a/arch/arm/configs/imx_v6_v7_defconfig b/arch/arm/configs/imx_v6_v7_defconfig
>index 29cd1ac48987..72c4231d1b62 100644
>--- a/arch/arm/configs/imx_v6_v7_defconfig
>+++ b/arch/arm/configs/imx_v6_v7_defconfig
>@@ -368,6 +368,8 @@ CONFIG_PWM=y
> CONFIG_PWM_FSL_FTM=y
> CONFIG_PWM_IMX=y
> CONFIG_NVMEM_IMX_OCOTP=y
>+CONFIG_TEE=y
>+CONFIG_OPTEE=y
> CONFIG_MUX_MMIO=y
> CONFIG_EXT2_FS=y
> CONFIG_EXT2_FS_XATTR=y
>-- 
>2.14.1
>
Shawn Guo Feb. 2, 2018, 12:44 a.m. UTC | #2 
On Fri, Jan 05, 2018 at 05:40:35PM +0800, Peng Fan wrote:
> This patch enables configs for Trusted Execution Environment(TEE) and
> Open Portable Trusted Execution Environment(OP-TEE).
> 
> With Linux running in Trustzone non-secure world, OP-TEE OS runs in
> secure world, linux could use secure services provided by OP-TEE.
> With TEE/OP-TEE options selected, use the bindings
> in Documentation/devicetree/bindings/arm/firmware/linaro,optee-tz.txt
> to let the driver probe work.
> 
> On i.MX6/7, now the bootflow is U-Boot->OP-TEE->Linux, OP-TEE will
> automatically create that node.
> 
> Signed-off-by: Peng Fan <peng.fan@nxp.com>

Applied, thanks.
diff mbox series

Patch

diff --git a/arch/arm/configs/imx_v6_v7_defconfig b/arch/arm/configs/imx_v6_v7_defconfig
index 29cd1ac48987..72c4231d1b62 100644
--- a/arch/arm/configs/imx_v6_v7_defconfig
+++ b/arch/arm/configs/imx_v6_v7_defconfig
@@ -368,6 +368,8 @@  CONFIG_PWM=y
 CONFIG_PWM_FSL_FTM=y
 CONFIG_PWM_IMX=y
 CONFIG_NVMEM_IMX_OCOTP=y
+CONFIG_TEE=y
+CONFIG_OPTEE=y
 CONFIG_MUX_MMIO=y
 CONFIG_EXT2_FS=y
 CONFIG_EXT2_FS_XATTR=y