Changes in Kconfig

c835e5a3 - tee: tstee: Add Trusted Services TEE driver

Mon, 25 Mar 2024 15:11:03 +0000

tee: tstee: Add Trusted Services TEE driverThe Trusted Services project provides a framework for developing anddeploying device Root of Trust services in FF-A Secure Partitions. TheFF-A SPs are accessible through the FF-A driver, but this doesn'tprovide a user space interface. The goal of this TEE driver is to makeTrusted Services SPs accessible for user space clients.All TS SPs have the same FF-A UUID, it identifies the RPC protocol usedby TS. A TS SP can host one or more services, a service is identified byits service UUID. The same type of service cannot be present twice inthe same SP. During SP boot each service in an SP is assigned aninterface ID, this is just a short ID to simplify message addressing.There is 1:1 mapping between TS SPs and TEE devices, i.e. a separate TEEdevice is registered for each TS SP. This is required since contrary tothe generic TEE design where memory is shared with the whole TEEimplementation, in case of FF-A, memory is shared with a specific SP. Auser space client has to be able to separately share memory with each SPbased on its endpoint ID.Acked-by: Sumit Garg Signed-off-by: Balint Dobszay Signed-off-by: Jens Wiklander List of files: /linux-6.15/drivers/tee/Kconfig

a4b75fe8 - tee: combine "config" and "menu" for TEE's menuconfig

Tue, 28 Dec 2021 19:57:37 +0000

tee: combine "config" and "menu" for TEE's menuconfigDon't let TEE occupy two lines in menuconfig when practically noother (sub)menu does either.Signed-off-by: Jan Engelhardt Reviewed-by: Sumit Garg Signed-off-by: Jens Wiklander List of files: /linux-6.15/drivers/tee/Kconfig

60b4000f - tee: fix crypto select

Wed, 27 May 2020 13:39:16 +0000

tee: fix crypto selectWhen selecting a crypto cipher, we also need to select thesubsystem itself:WARNING: unmet direct dependencies detected for CRYPTO_SHA1 Depends on [m]: CRYPTO [=m] Selected by [y]: - TEE [=y] && (HAVE_ARM_SMCCC [=n] || COMPILE_TEST [=y] || CPU_SUP_AMD [=y]) Selected by [m]: - CRYPTO_DEV_QAT [=m] && CRYPTO [=m] && CRYPTO_HW [=y] - CRYPTO_DEV_MEDIATEK [=m] && CRYPTO [=m] && CRYPTO_HW [=y] && (ARM && ARCH_MEDIATEK || COMPILE_TEST [=y]) - CRYPTO_DEV_SAFEXCEL [=m] && CRYPTO [=m] && CRYPTO_HW [=y] && (OF [=y] || PCI [=y] || COMPILE_TEST [=y]) && HAS_IOMEM [=y] - CRYPTO_DEV_CCREE [=m] && CRYPTO [=m] && CRYPTO_HW [=y] && OF [=y] && HAS_DMA [=y] - CRYPTO_DEV_SP_CCP [=y] && CRYPTO [=m] && CRYPTO_HW [=y] && CRYPTO_DEV_CCP [=y] && CRYPTO_DEV_CCP_DD [=m] && DMADEVICES [=y]Link: https://lore.kernel.org/r/20200527133924.724819-1-arnd@arndb.deFixes: e33bcbab16d1 ("tee: add support for session's client UUID generation")Signed-off-by: Arnd Bergmann Reviewed-by: Vesa Jääskeläinen Signed-off-by: Arnd Bergmann List of files: /linux-6.15/drivers/tee/Kconfig

e33bcbab - tee: add support for session's client UUID generation

Thu, 30 Apr 2020 12:37:09 +0000

tee: add support for session's client UUID generationTEE Client API defines that from user space only information needed forspecified login operations is group identifier for group based logins.REE kernel is expected to formulate trustworthy client UUID and pass thatto TEE environment. REE kernel is required to verify that provided groupidentifier for group based logins matches calling processes groupmemberships.TEE specification only defines that the information passed from REEenvironment to TEE environment is encoded into on UUID.In order to guarantee trustworthiness of client UUID user space is notallowed to freely pass client UUID.UUIDv5 form is used encode variable amount of information needed fordifferent login types.Signed-off-by: Vesa Jääskeläinen [jw: remove unused variable application_id]Signed-off-by: Jens Wiklander List of files: /linux-6.15/drivers/tee/Kconfig

757cc3e9 - tee: add AMD-TEE driver

Fri, 27 Dec 2019 05:24:01 +0000

tee: add AMD-TEE driverAdds AMD-TEE driver.* targets AMD APUs which has AMD Secure Processor with software-based Trusted Execution Environment (TEE) support* registers with TEE subsystem* defines tee_driver_ops function callbacks* kernel allocated memory is used as shared memory between normal world and secure world.* acts as REE (Rich Execution Environment) communication agent, which uses the services of AMD Secure Processor driver to submit commands for processing in TEE environmentCc: Ard Biesheuvel Cc: Tom Lendacky Acked-by: Jens Wiklander Co-developed-by: Devaraj Rangasamy Signed-off-by: Devaraj Rangasamy Signed-off-by: Rijo Thomas Reviewed-by: Gary R Hook Signed-off-by: Herbert Xu List of files: /linux-6.15/drivers/tee/Kconfig

1a74fa38 - tee: allow compilation of tee subsystem for AMD CPUs

Fri, 27 Dec 2019 05:24:00 +0000

tee: allow compilation of tee subsystem for AMD CPUsAllow compilation of tee subsystem for AMD's CPUs which have a dedicatedAMD Secure Processor for Trusted Execution Environment (TEE).Acked-by: Jens Wiklander Co-developed-by: Devaraj Rangasamy Signed-off-by: Devaraj Rangasamy Signed-off-by: Rijo Thomas Reviewed-by: Gary R Hook Signed-off-by: Herbert Xu List of files: /linux-6.15/drivers/tee/Kconfig

ec8f24b7 - treewide: Add SPDX license identifier - Makefile/Kconfig

Sun, 19 May 2019 12:07:45 +0000

treewide: Add SPDX license identifier - Makefile/KconfigAdd SPDX license identifiers to all Make/Kconfig files which: - Have no license information of any formThese files fall under the project license, GPL v2 only. The resulting SPDXlicense identifier is: GPL-2.0-onlySigned-off-by: Thomas Gleixner Signed-off-by: Greg Kroah-Hartman List of files: /linux-6.15/drivers/tee/Kconfig

e8418885 - tee: add ARM_SMCCC dependency

Wed, 10 May 2017 19:05:16 +0000

tee: add ARM_SMCCC dependencyFor the moment, the tee subsystem only makes sense in combination withthe op-tee driver that depends on ARM_SMCCC, so let's hide the subsystemfrom users that can't select that.Suggested-by: Linus Torvalds Signed-off-by: Arnd Bergmann List of files: /linux-6.15/drivers/tee/Kconfig

4fb0a5eb - tee: add OP-TEE driver

Tue, 14 Apr 2015 12:33:20 +0000

tee: add OP-TEE driverAdds a OP-TEE driver which also can be compiled as a loadable module.* Targets ARM and ARM64* Supports using reserved memory from OP-TEE as shared memory* Probes OP-TEE version using SMCs* Accepts requests on privileged and unprivileged device* Uses OPTEE message protocol version 2 to communicate with secure worldAcked-by: Andreas Dannenberg Tested-by: Jerome Forissier (HiKey)Tested-by: Volodymyr Babchuk (RCAR H3)Tested-by: Scott Branden Reviewed-by: Javier González Signed-off-by: Jens Wiklander List of files: /linux-6.15/drivers/tee/Kconfig

967c9cca - tee: generic TEE subsystem

Wed, 11 Mar 2015 13:39:39 +0000

tee: generic TEE subsystemInitial patch for generic TEE subsystem.This subsystem provides:* Registration/un-registration of TEE drivers.* Shared memory between normal world and secure world.* Ioctl interface for interaction with user space.* Sysfs implementation_id of TEE driverA TEE (Trusted Execution Environment) driver is a driver that interfaceswith a trusted OS running in some secure environment, for example,TrustZone on ARM cpus, or a separate secure co-processor etc.The TEE subsystem can serve a TEE driver for a Global Platform compliantTEE, but it's not limited to only Global Platform TEEs.This patch builds on other similar implementations trying to solvethe same problem:* "optee_linuxdriver" by among others Jean-michel DELORME and Emmanuel MICHEL * "Generic TrustZone Driver" by Javier González Acked-by: Andreas Dannenberg Tested-by: Jerome Forissier (HiKey)Tested-by: Volodymyr Babchuk (RCAR H3)Tested-by: Scott Branden Reviewed-by: Javier González Signed-off-by: Jens Wiklander List of files: /linux-6.15/drivers/tee/Kconfig