mirror of
git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
synced 2026-03-28 10:18:25 +08:00
tee: add TEE_IOCTL_PARAM_ATTR_TYPE_OBJREF
The TEE subsystem allows session-based access to trusted services, requiring a session to be established to receive a service. This is not suitable for an environment that represents services as objects. An object supports various operations that a client can invoke, potentially generating a result or a new object that can be invoked independently of the original object. Add TEE_IOCTL_PARAM_ATTR_TYPE_OBJREF_INPUT/OUTPUT/INOUT to represent an object. Objects may reside in either TEE or userspace. To invoke an object in TEE, introduce a new ioctl. Use the existing SUPPL_RECV and SUPPL_SEND to invoke an object in userspace. Reviewed-by: Sumit Garg <sumit.garg@oss.qualcomm.com> Tested-by: Neil Armstrong <neil.armstrong@linaro.org> Tested-by: Harshal Dev <quic_hdev@quicinc.com> Signed-off-by: Amirreza Zarrabi <amirreza.zarrabi@oss.qualcomm.com> Signed-off-by: Jens Wiklander <jens.wiklander@linaro.org>
This commit is contained in:
committed by
Jens Wiklander
parent
54a53e95a9
commit
d5b8b0fa17
@@ -48,8 +48,10 @@
|
||||
#define TEE_GEN_CAP_PRIVILEGED (1 << 1)/* Privileged device (for supplicant) */
|
||||
#define TEE_GEN_CAP_REG_MEM (1 << 2)/* Supports registering shared memory */
|
||||
#define TEE_GEN_CAP_MEMREF_NULL (1 << 3)/* NULL MemRef support */
|
||||
#define TEE_GEN_CAP_OBJREF (1 << 4)/* Supports generic object reference */
|
||||
|
||||
#define TEE_MEMREF_NULL (__u64)(-1) /* NULL MemRef Buffer */
|
||||
#define TEE_MEMREF_NULL ((__u64)(-1)) /* NULL MemRef Buffer */
|
||||
#define TEE_OBJREF_NULL ((__u64)(-1)) /* NULL ObjRef Object */
|
||||
|
||||
/*
|
||||
* TEE Implementation ID
|
||||
@@ -158,6 +160,13 @@ struct tee_ioctl_buf_data {
|
||||
#define TEE_IOCTL_PARAM_ATTR_TYPE_UBUF_OUTPUT 9
|
||||
#define TEE_IOCTL_PARAM_ATTR_TYPE_UBUF_INOUT 10 /* input and output */
|
||||
|
||||
/*
|
||||
* These defines object reference parameters.
|
||||
*/
|
||||
#define TEE_IOCTL_PARAM_ATTR_TYPE_OBJREF_INPUT 11
|
||||
#define TEE_IOCTL_PARAM_ATTR_TYPE_OBJREF_OUTPUT 12
|
||||
#define TEE_IOCTL_PARAM_ATTR_TYPE_OBJREF_INOUT 13
|
||||
|
||||
/*
|
||||
* Mask for the type part of the attribute, leaves room for more types
|
||||
*/
|
||||
@@ -195,15 +204,16 @@ struct tee_ioctl_buf_data {
|
||||
* @attr: attributes
|
||||
* @a: if a memref, offset into the shared memory object,
|
||||
* else if a ubuf, address of the user buffer,
|
||||
* else a value parameter
|
||||
* @b: if a memref or ubuf, size of the buffer, else a value parameter
|
||||
* else if an objref, object identifier, else a value parameter
|
||||
* @b: if a memref or ubuf, size of the buffer,
|
||||
* else if objref, flags for the object, else a value parameter
|
||||
* @c: if a memref, shared memory identifier, else a value parameter
|
||||
*
|
||||
* @attr & TEE_PARAM_ATTR_TYPE_MASK indicates if memref, ubuf, or value is
|
||||
* used in the union. TEE_PARAM_ATTR_TYPE_VALUE_* indicates value,
|
||||
* TEE_PARAM_ATTR_TYPE_MEMREF_* indicates memref, and TEE_PARAM_ATTR_TYPE_UBUF_*
|
||||
* indicates ubuf. TEE_PARAM_ATTR_TYPE_NONE indicates that none of the members
|
||||
* are used.
|
||||
* TEE_PARAM_ATTR_TYPE_MEMREF_* indicates memref, TEE_PARAM_ATTR_TYPE_UBUF_*
|
||||
* indicates ubuf, and TEE_PARAM_ATTR_TYPE_OBJREF_* indicates objref.
|
||||
* TEE_PARAM_ATTR_TYPE_NONE indicates that none of the members are used.
|
||||
*
|
||||
* Shared memory is allocated with TEE_IOC_SHM_ALLOC which returns an
|
||||
* identifier representing the shared memory object. A memref can reference
|
||||
@@ -442,4 +452,23 @@ struct tee_ioctl_shm_register_fd_data {
|
||||
* munmap(): unmaps previously shared memory
|
||||
*/
|
||||
|
||||
/**
|
||||
* struct tee_ioctl_invoke_func_arg - Invokes an object in a Trusted Application
|
||||
* @id: [in] Object id
|
||||
* @op: [in] Object operation, specific to the object
|
||||
* @ret: [out] return value
|
||||
* @num_params: [in] number of parameters following this struct
|
||||
*/
|
||||
struct tee_ioctl_object_invoke_arg {
|
||||
__u64 id;
|
||||
__u32 op;
|
||||
__u32 ret;
|
||||
__u32 num_params;
|
||||
/* num_params tells the actual number of element in params */
|
||||
struct tee_ioctl_param params[];
|
||||
};
|
||||
|
||||
#define TEE_IOC_OBJECT_INVOKE _IOR(TEE_IOC_MAGIC, TEE_IOC_BASE + 10, \
|
||||
struct tee_ioctl_buf_data)
|
||||
|
||||
#endif /*__TEE_H*/
|
||||
|
||||
Reference in New Issue
Block a user