diff mbox series

[v9,2/4] dt-bindings: mtd: Add a property to declare secure regions in NAND chips

Message ID 20210401151508.143075-3-manivannan.sadhasivam@linaro.org
State Superseded
Headers show
Series Add support for secure regions in NAND | expand

Commit Message

Manivannan Sadhasivam April 1, 2021, 3:15 p.m. UTC
On a typical end product, a vendor may choose to secure some regions in
the NAND memory which are supposed to stay intact between FW upgrades.
The access to those regions will be blocked by a secure element like
Trustzone. So the normal world software like Linux kernel should not
touch these regions (including reading).

So let's add a property for declaring such secure regions so that the
drivers can skip touching them.

Signed-off-by: Manivannan Sadhasivam <manivannan.sadhasivam@linaro.org>
---
 Documentation/devicetree/bindings/mtd/nand-controller.yaml | 7 +++++++
 1 file changed, 7 insertions(+)

Comments

Rob Herring April 6, 2021, 4:31 p.m. UTC | #1
On Thu, 01 Apr 2021 20:45:06 +0530, Manivannan Sadhasivam wrote:
> On a typical end product, a vendor may choose to secure some regions in

> the NAND memory which are supposed to stay intact between FW upgrades.

> The access to those regions will be blocked by a secure element like

> Trustzone. So the normal world software like Linux kernel should not

> touch these regions (including reading).

> 

> So let's add a property for declaring such secure regions so that the

> drivers can skip touching them.

> 

> Signed-off-by: Manivannan Sadhasivam <manivannan.sadhasivam@linaro.org>

> ---

>  Documentation/devicetree/bindings/mtd/nand-controller.yaml | 7 +++++++

>  1 file changed, 7 insertions(+)

> 



Please add Acked-by/Reviewed-by tags when posting new versions. However,
there's no need to repost patches *only* to add the tags. The upstream
maintainer will do that for acks received on the version they apply.

If a tag was not added on purpose, please state why and what changed.
diff mbox series

Patch

diff --git a/Documentation/devicetree/bindings/mtd/nand-controller.yaml b/Documentation/devicetree/bindings/mtd/nand-controller.yaml
index d0e422f4b3e0..678b39952502 100644
--- a/Documentation/devicetree/bindings/mtd/nand-controller.yaml
+++ b/Documentation/devicetree/bindings/mtd/nand-controller.yaml
@@ -143,6 +143,13 @@  patternProperties:
           Ready/Busy pins. Active state refers to the NAND ready state and
           should be set to GPIOD_ACTIVE_HIGH unless the signal is inverted.
 
+      secure-regions:
+        $ref: /schemas/types.yaml#/definitions/uint64-matrix
+        description:
+          Regions in the NAND chip which are protected using a secure element
+          like Trustzone. This property contains the start address and size of
+          the secure regions present.
+
     required:
       - reg