[lkml]   [2022]   [Sep]   [2]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: [PATCH 0/4] firmware: Add support for Qualcomm UEFI Secure Application

On 9/2/22 09:26, Sumit Garg wrote:
> Hi Maximilian,
> On 02/08/22 18:52, Maximilian Luz wrote:


>> Thanks for this information! So as far as I understand it, this is currently an
>> interface to user-space only, i.e. does not allow in-kernel drivers for apps?
> The Linux TEE framework already provides an in-kernel interface to TEE as well via TEE bus [1]. There are already multiple kernel drivers [2] [3] [4] [5] [6] [7] using it. So an EFI driver can be an addition to that.
> Now coming on to TEE implementations, the drivers I mentioned are based on OP-TEE where devices are queried/enumerated during OP-TEE probe here [8]. So in similar manner QTEE smcinvoke driver should be able to register devices on the TEE bus.
> [1]
> [2] drivers/char/tpm/tpm_ftpm_tee.c
> [3] drivers/char/hw_random/optee-rng.c
> [4] drivers/firmware/arm_scmi/optee.c
> [5] security/keys/trusted-keys/trusted_tee.c
> [6] drivers/firmware/broadcom/tee_bnxt_fw.c
> [7] drivers/rtc/rtc-optee.c
> [8] drivers/tee/optee/device.c

Thanks for those links!

I think it would indeed be good if we could make it work via that
interface and I guess that should generally be possible. As far as I can
see, the biggest problem might be that the current firmware doesn't seem
to use UUIDs, so I guess we might need to emulate them somehow.

It would be great if someone with some actual knowledge of the firmware
used on those devices could have a look at this and provide some

My plan for now is to hold off on the UEFI variable driver until we have
a (proper) TEE driver, which unfortunately might be a bit out of my
depth. I'm happy to help out in any way I can though.


 \ /
  Last update: 2022-09-02 15:45    [W:0.118 / U:4.120 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site