@@ -45,6 +45,12 @@ properties:
Can be any value as specified by device tree binding documentation
of a particular provider. The node is an access controller.
+ "#access-conf-cells":
+ description:
+ Number of cells in an *(?<=)-access-conf$ specifier;
+ Can be any value as specified by device tree binding documentation
+ of a particular provider. The node is an access controller.
+
access-controller-names:
$ref: /schemas/types.yaml#/definitions/string-array
description:
@@ -58,6 +64,16 @@ properties:
A list of access controller specifiers, as defined by the
bindings of the access-controllers provider.
+patternProperties:
+ ".*(?<=)-access-conf$":
+ $ref: /schemas/types.yaml#/definitions/phandle-array
+ description:
+ An access controller configuration contains a list of inseparable entries.
+ A configuration may reference multiple access controllers. Therefore, each
+ entry content may vary accordingly to the access controller
+ "#access-conf-cells" value. A consumer will use this property to be able
+ to dynamically query for an access rights update.
+
additionalProperties: true
examples:
@@ -65,6 +81,7 @@ examples:
clock_controller: access-controllers@50000 {
reg = <0x50000 0x400>;
#access-controller-cells = <2>;
+ #access-conf-cells = <2>;
};
bus_controller: bus@60000 {
@@ -73,6 +90,7 @@ examples:
#size-cells = <1>;
ranges;
#access-controller-cells = <3>;
+ #access-conf-cells = <2>;
uart4: serial@60100 {
reg = <0x60100 0x400>;
@@ -81,4 +99,17 @@ examples:
<&bus_controller 1 3 5>;
access-controller-names = "clock", "bus";
};
+
+ uart5: serial@60200 {
+ reg = <0x60200 0x400>;
+ clocks = <&clk_serial2>;
+ access-controllers = <&bus_controller 0 0 0>, <&bus_controller 1 0 0>,
+ <&clock_controller 2 3>;
+ default-access-conf = <&bus_controller 0 10>,
+ <&bus_controller 1 10>,
+ <&clock_controller 0 0>;
+ shared-access-conf = <&bus_controller 0 256>,
+ <&bus_controller 1 256>,
+ <&clock_controller 0 256>;
+ };
};
Add a pattern property to allow a device to request an alternate access rights configuration to one or more firewall controllers. It allows run-time controller reconfiguration of access rights to an authorized entity as use in OP-TEE OS [1]. Signed-off-by: Gatien Chevallier <gatien.chevallier@foss.st.com> Link: https://github.com/OP-TEE/optee_os/pull/6946 [1] --- Changes in V2: - Addition of #access-conf-cells property --- .../access-controllers/access-controllers.yaml | 31 ++++++++++++++++++++++ 1 file changed, 31 insertions(+) --- base-commit: 42f7652d3eb527d03665b09edac47f85fb600924 change-id: 20241025-firewall-conf-v2-c7074b3019bf Best regards,