]> git.ipfire.org Git - thirdparty/u-boot.git/commitdiff
arm: dts: k3-am625-verdin-binman: Configure Firewall for ATF/OPTEE
authorSuhaas Joshi <s-joshi@ti.com>
Tue, 27 Jan 2026 08:16:46 +0000 (13:46 +0530)
committerTom Rini <trini@konsulko.com>
Sat, 7 Feb 2026 17:50:06 +0000 (11:50 -0600)
Add firewall configurations to protect ATF and OP-TEE memory regions
from non-secure read's and write's in Verdin AM62 board.

Signed-off-by: Suhaas Joshi <s-joshi@ti.com>
arch/arm/dts/k3-am625-verdin-wifi-dev-binman.dtsi

index 65fef6e479070bb64cd1297d17b189c72892379f..7b6466295876fdd3200194c45f5616a6cf1a61c0 100644 (file)
                fit {
 
                        images {
+                               atf {
+                                       ti-secure {
+                                               auth-in-place = <0xa02>;
+
+                                               firewall-1-0 {
+                                                       insert-template = <&firewall_bg_3>;
+                                                       id = <1>;
+                                                       region = <0>;
+                                               };
+
+                                               firewall-1-1 {
+                                                       insert-template = <&firewall_armv8_atf_fg>;
+                                                       id = <1>;
+                                                       region = <1>;
+                                               };
+                                       };
+                               };
+
+                               tee {
+                                       ti-secure {
+                                               auth-in-place = <0xa02>;
+
+                                               firewall-1-2 {
+                                                       insert-template = <&firewall_armv8_optee_fg>;
+                                                       id = <1>;
+                                                       region = <2>;
+                                               };
+                                       };
+                               };
+
                                tifsstub-hs {
                                        description = "TIFSSTUB";
                                        type = "firmware";