diff mbox series

arm: Kconfig: Explain TFABOOT

Message ID 20200930144507.15710-1-andre.przywara@arm.com
State Accepted
Delegated to: Tom Rini
Headers show
Series arm: Kconfig: Explain TFABOOT | expand

Commit Message

André Przywara Sept. 30, 2020, 2:45 p.m. UTC
The CONFIG_TFABOOT option is more about what U-Boot DOES NOT need to do
than to support some features.

Explain a bit more in the Kconfig help text to avoid misunderstandings.

Signed-off-by: Andre Przywara <andre.przywara@arm.com>
---
 arch/arm/Kconfig | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

Comments

Tom Rini Sept. 30, 2020, 3:33 p.m. UTC | #1
On Wed, Sep 30, 2020 at 03:45:07PM +0100, Andre Przywara wrote:

> The CONFIG_TFABOOT option is more about what U-Boot DOES NOT need to do
> than to support some features.
> 
> Explain a bit more in the Kconfig help text to avoid misunderstandings.
> 
> Signed-off-by: Andre Przywara <andre.przywara@arm.com>

Thanks!

Reviewed-by: Tom Rini <trini@konsulko.com>
Tom Rini Oct. 9, 2020, 1:02 p.m. UTC | #2
On Wed, Sep 30, 2020 at 03:45:07PM +0100, Andre Przywara wrote:

> The CONFIG_TFABOOT option is more about what U-Boot DOES NOT need to do
> than to support some features.
> 
> Explain a bit more in the Kconfig help text to avoid misunderstandings.
> 
> Signed-off-by: Andre Przywara <andre.przywara@arm.com>
> Reviewed-by: Tom Rini <trini@konsulko.com>

Applied to u-boot/master, thanks!
diff mbox series

Patch

diff --git a/arch/arm/Kconfig b/arch/arm/Kconfig
index 8ba73680699..88ed3f2344d 100644
--- a/arch/arm/Kconfig
+++ b/arch/arm/Kconfig
@@ -1797,8 +1797,13 @@  config TFABOOT
 	depends on ARCH_SUPPORT_TFABOOT
 	default n
 	help
-	  Enabling this will make a U-Boot binary that is capable of being
-	  booted via TF-A (Trusted Firmware for Cortex-A).
+	  Some platforms support the setup of secure registers (for instance
+	  for CPU errata handling) or provide secure services like PSCI.
+	  Those services could also be provided by other firmware parts
+	  like TF-A (Trusted Firmware for Cortex-A), in which case U-Boot
+	  does not need to (and cannot) execute this code.
+	  Enabling this option will make a U-Boot binary that is relying
+	  on other firmware layers to provide secure functionality.
 
 config TI_SECURE_DEVICE
 	bool "HS Device Type Support"