linux-kernel - [PATCH v2] dt-bindings: access-controllers: add controller configuration property

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20241030-firewall-conf-v2-v2-1-b531fd2957bb@foss.st.com>
Date: Wed, 30 Oct 2024 15:45:30 +0100
From: Gatien Chevallier <gatien.chevallier@...s.st.com>
To: Rob Herring <robh@...nel.org>, Krzysztof Kozlowski <krzk+dt@...nel.org>,
        Conor Dooley <conor+dt@...nel.org>,
        Oleksii Moisieiev
	<oleksii_moisieiev@...m.com>
CC: <devicetree@...r.kernel.org>, <linux-kernel@...r.kernel.org>,
        <alvinga@...estech.com>,
        Gatien Chevallier <gatien.chevallier@...s.st.com>
Subject: [PATCH v2] dt-bindings: access-controllers: add controller
 configuration property

Add a pattern property to allow a device to request an alternate
access rights configuration to one or more firewall controllers.
It allows run-time controller reconfiguration of access rights
to an authorized entity as use in OP-TEE OS [1].

Signed-off-by: Gatien Chevallier <gatien.chevallier@...s.st.com>
Link: https://github.com/OP-TEE/optee_os/pull/6946 [1]
---
Changes in V2:
	- Addition of #access-conf-cells property
---
 .../access-controllers/access-controllers.yaml     | 31 ++++++++++++++++++++++
 1 file changed, 31 insertions(+)

diff --git a/Documentation/devicetree/bindings/access-controllers/access-controllers.yaml b/Documentation/devicetree/bindings/access-controllers/access-controllers.yaml
index 99e2865f0e46a0600ebbba3bc5771dc63d578c8b..304eecc79db8ae98a0330b3ec186e29832fb8c87 100644
--- a/Documentation/devicetree/bindings/access-controllers/access-controllers.yaml
+++ b/Documentation/devicetree/bindings/access-controllers/access-controllers.yaml
@@ -45,6 +45,12 @@ properties:
       Can be any value as specified by device tree binding documentation
       of a particular provider. The node is an access controller.
 
+  "#access-conf-cells":
+    description:
+      Number of cells in an *(?<=)-access-conf$ specifier;
+      Can be any value as specified by device tree binding documentation
+      of a particular provider. The node is an access controller.
+
   access-controller-names:
     $ref: /schemas/types.yaml#/definitions/string-array
     description:
@@ -58,6 +64,16 @@ properties:
       A list of access controller specifiers, as defined by the
       bindings of the access-controllers provider.
 
+patternProperties:
+  ".*(?<=)-access-conf$":
+    $ref: /schemas/types.yaml#/definitions/phandle-array
+    description:
+      An access controller configuration contains a list of inseparable entries.
+      A configuration may reference multiple access controllers. Therefore, each
+      entry content may vary accordingly to the access controller
+      "#access-conf-cells" value. A consumer will use this property to be able
+      to dynamically query for an access rights update.
+
 additionalProperties: true
 
 examples:
@@ -65,6 +81,7 @@ examples:
     clock_controller: access-controllers@...00 {
         reg = <0x50000 0x400>;
         #access-controller-cells = <2>;
+        #access-conf-cells = <2>;
     };
 
     bus_controller: bus@...00 {
@@ -73,6 +90,7 @@ examples:
         #size-cells = <1>;
         ranges;
         #access-controller-cells = <3>;
+        #access-conf-cells = <2>;
 
         uart4: serial@...00 {
             reg = <0x60100 0x400>;
@@ -81,4 +99,17 @@ examples:
                                  <&bus_controller 1 3 5>;
             access-controller-names = "clock", "bus";
         };
+
+        uart5: serial@...00 {
+          reg = <0x60200 0x400>;
+          clocks = <&clk_serial2>;
+          access-controllers = <&bus_controller 0 0 0>, <&bus_controller 1 0 0>,
+                               <&clock_controller 2 3>;
+          default-access-conf = <&bus_controller 0 10>,
+                                <&bus_controller 1 10>,
+                                <&clock_controller 0 0>;
+          shared-access-conf = <&bus_controller 0 256>,
+                               <&bus_controller 1 256>,
+                               <&clock_controller 0 256>;
+        };
     };

---
base-commit: 42f7652d3eb527d03665b09edac47f85fb600924
change-id: 20241025-firewall-conf-v2-c7074b3019bf

Best regards,
-- 
Gatien Chevallier <gatien.chevallier@...s.st.com>