Linus Torvalds
a2d9214c73
TEE driver infrastructure and OP-TEE drivers ...
This branch introduces a generic TEE framework in the kernel, to handle
trusted environemtns (security coprocessor or software implementations
such as OP-TEE/TrustZone). I'm sending it separately from the other
arm-soc driver changes to give it a little more visibility, once
the subsystem is merged, we will likely keep this in the arm₋soc
drivers branch or have the maintainers submit pull requests directly,
depending on the patch volume.
I have reviewed earlier versions in the past, and have reviewed
the latest version in person during Linaro Connect BUD17.
Here is my overall assessment of the subsystem:
* There is clearly demand for this, both for the generic
infrastructure and the specific OP-TEE implementation.
* The code has gone through a large number of reviews,
and the review comments have all been addressed, but
the reviews were not coming up with serious issues any more
and nobody volunteered to vouch for the quality.
* The user space ioctl interface is sufficient to work with the
OP-TEE driver, and it should in principle work with other
TEE implementations that follow the GlobalPlatform[1] standards,
but it might need to be extended in minor ways depending on
specific requirements of future TEE implementations
* The main downside of the API to me is how the user space
is tied to the TEE implementation in hardware or firmware,
but uses a generic way to communicate with it. This seems
to be an inherent problem with what it is trying to do,
and I could not come up with any better solution than what
is implemented here.
For a detailed history of the patch series, see
https://lkml.org/lkml/2017/3/10/1277
Conflicts: needs a fixup after the drm tree was merged, see
https://patchwork.kernel.org/patch/9691679/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=VzpB
-----END PGP SIGNATURE-----
Merge tag 'armsoc-tee' of git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc
Pull TEE driver infrastructure and OP-TEE drivers from Arnd Bergmann:
"This introduces a generic TEE framework in the kernel, to handle
trusted environemtns (security coprocessor or software implementations
such as OP-TEE/TrustZone). I'm sending it separately from the other
arm-soc driver changes to give it a little more visibility, once the
subsystem is merged, we will likely keep this in the arm₋soc drivers
branch or have the maintainers submit pull requests directly,
depending on the patch volume.
I have reviewed earlier versions in the past, and have reviewed the
latest version in person during Linaro Connect BUD17.
Here is my overall assessment of the subsystem:
- There is clearly demand for this, both for the generic
infrastructure and the specific OP-TEE implementation.
- The code has gone through a large number of reviews, and the review
comments have all been addressed, but the reviews were not coming
up with serious issues any more and nobody volunteered to vouch for
the quality.
- The user space ioctl interface is sufficient to work with the
OP-TEE driver, and it should in principle work with other TEE
implementations that follow the GlobalPlatform[1] standards, but it
might need to be extended in minor ways depending on specific
requirements of future TEE implementations
- The main downside of the API to me is how the user space is tied to
the TEE implementation in hardware or firmware, but uses a generic
way to communicate with it. This seems to be an inherent problem
with what it is trying to do, and I could not come up with any
better solution than what is implemented here.
For a detailed history of the patch series, see
https://lkml.org/lkml/2017/3/10/1277 "
* tag 'armsoc-tee' of git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc:
arm64: dt: hikey: Add optee node
Documentation: tee subsystem and op-tee driver
tee: add OP-TEE driver
tee: generic TEE subsystem
dt/bindings: add bindings for optee
2017-05-10 11:20:09 -07:00
Merge branch 'topic/pl330' into for-linus
2017-05-04 16:08:52 +05:30
scripts/spelling.txt: add regsiter -> register spelling mistake
2017-05-08 17:15:13 -07:00
can: complete initial namespace support
2017-04-25 09:04:29 +02:00
ceph: fix file open flags on ppc64
2017-05-04 09:19:24 +02:00
firmware /meson
This is the bulk of GPIO changes for the v4.12 kernel cycle:
2017-05-04 12:05:32 -07:00
Merge branch 'for-4.12/asus' into for-linus
2017-05-02 11:02:41 +02:00
Merge branch 'timers-core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
2017-05-01 16:15:18 -07:00
pci-v4.12-changes
2017-05-08 19:03:25 -07:00
treewide: spelling: correct diffrent[iate] and banlance typos
2017-05-08 17:15:13 -07:00
Updates #2 for 4.12 kernel merge window
2017-05-08 20:07:29 -07:00
mmc: core: Export API to allow hosts to get the card address
2017-04-24 21:49:15 +02:00
mtd: Convert to dynamically allocated bdi infrastructure
2017-04-20 12:09:55 -06:00
ebtables: remove nf_hook_register usage
2017-04-26 09:30:21 +02:00
This is the bulk of pin control changes for the v4.12 cycle:
2017-05-02 17:59:33 -07:00
IOMMU Updates for Linux v4.12
2017-05-09 15:15:47 -07:00
qed*: Fix possible overflow for status block id field.
2017-05-04 12:31:02 -04:00
Merge remote-tracking branches 'regulator/topic/notifier', 'regulator/topic/pfuze100', 'regulator/topic/settle', 'regulator/topic/tps65132' and 'regulator/topic/twl6030' into regulator-next
2017-04-30 22:17:36 +09:00
mm: introduce memalloc_noreclaim_{save,restore}
2017-05-08 17:15:15 -07:00
USB patches for 4.12-rc1
2017-05-04 18:03:51 -07:00
Merge remote-tracking branches 'spi/topic/ti-qspi' and 'spi/topic/xlp' into spi-next
2017-04-26 15:58:22 +01:00
USB patches for 4.12-rc1
2017-05-04 18:03:51 -07:00
IOMMU Updates for Linux v4.12
2017-05-09 15:15:47 -07:00
IOMMU Updates for Linux v4.12
2017-05-09 15:15:47 -07:00
libata: remove SCT WRITE SAME support
2017-04-28 18:09:59 -04:00
audit: Use timespec64 to represent audit timestamps
2017-05-02 10:16:05 -04:00
fs: Provide infrastructure for dynamic BDIs in filesystems
2017-04-20 12:09:55 -06:00
bdi: Drop 'parent' argument from bdi_register[_va]()
2017-04-20 12:09:55 -06:00
Merge branch 'md-next' into md-linus
2017-05-01 14:09:21 -07:00
blk-mq-debugfs: allow schedulers to register debugfs attributes
2017-05-04 08:24:40 -06:00
Merge branch 'for-linus' of git://git.kernel.dk/linux-block
2017-05-06 11:25:08 -07:00
fs: remove _submit_bh()
2017-04-26 23:54:06 -04:00
Merge branch 'for-4.12' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/cgroup
2017-05-01 13:52:24 -07:00
Merge branch 'timers-core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
2017-05-01 16:15:18 -07:00
clocksource: Use GENMASK_ULL in definition of CLOCKSOURCE_MASK
2017-04-20 14:56:58 +02:00
cma: Introduce cma_for_each_area
2017-04-18 20:41:12 +02:00
coda: Convert to separately allocated bdi
2017-04-20 12:09:55 -06:00
Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
2017-05-03 08:50:52 -07:00
console: move console_init() out of tty_io.c
2017-04-18 18:01:52 +02:00
cpufreq: schedutil: Use policy-dependent transition delays
2017-04-17 18:37:27 +02:00
cpumask: make "nr_cpumask_bits" unsigned
2017-05-08 17:15:11 -07:00
ia64: reuse append_elf_note() and final_note() functions
2017-05-08 17:15:11 -07:00
filesystem-dax: convert to dax_direct_access()
2017-04-25 13:20:46 -07:00
libnvdimm for 4.12
2017-05-05 18:49:20 -07:00
dma-buf: Rename dma-ops to prevent conflict with kunmap_atomic macro
2017-04-20 13:47:46 +05:30
mm: Rename SLAB_DESTROY_BY_RCU to SLAB_TYPESAFE_BY_RCU
2017-04-18 11:42:36 -07:00
Merge branches 'arm/exynos', 'arm/omap', 'arm/rockchip', 'arm/mediatek', 'arm/smmu', 'arm/core', 'x86/vt-d', 'x86/amd' and 'core' into next
2017-05-04 18:06:17 +02:00
of/acpi: Configure dma operations at probe time for platform/amba/pci bus devices
2017-04-20 16:31:06 +02:00
x86, iommu/vt-d: Add an option to disable Intel IOMMU force on
2017-04-26 23:57:53 +02:00
blk-mq-debugfs: allow schedulers to register debugfs attributes
2017-05-04 08:24:40 -06:00
ia64: reuse append_elf_note() and final_note() functions
2017-05-08 17:15:11 -07:00
f2fs: introduce CP_TRIMMED_FLAG to avoid unneeded discard
2017-05-03 10:04:56 -07:00
fs: add a VALID_OPEN_FLAGS
2017-04-27 05:13:04 -04:00
include/linux/filter.h: use set_memory.h header
2017-05-08 17:15:14 -07:00
Merge branch 'work.misc' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
2017-05-09 09:12:53 -07:00
fscrypt: remove fscrypt_symlink_data_len()
2017-04-30 01:26:34 -04:00
fscrypt: introduce helper function for filename matching
2017-05-04 11:44:37 -04:00
fscrypt: correct collision claim for digested names
2017-05-04 11:44:41 -04:00
scripts/spelling.txt: add regsiter -> register spelling mistake
2017-05-08 17:15:13 -07:00
block: get rid of blk_integrity_revalidate()
2017-04-21 14:17:27 -06:00
mm: fix spelling error
2017-05-03 15:52:10 -07:00
Merge branches 'for-4.11/upstream-fixes', 'for-4.12/accutouch', 'for-4.12/cp2112', 'for-4.12/hid-core-null-state-handling', 'for-4.12/hiddev', 'for-4.12/i2c-hid', 'for-4.12/innomedia', 'for-4.12/logitech-hidpp-battery-power-supply', 'for-4.12/multitouch', 'for-4.12/nti', 'for-4.12/upstream' and 'for-4.12/wacom' into for-linus
2017-05-02 11:01:10 +02:00
char/misc patches for 4.12-rc1
2017-05-04 19:15:35 -07:00
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input
2017-05-03 12:38:20 -07:00
scsi: introduce a result field in struct scsi_request
2017-04-20 12:16:10 -06:00
mac80211: Add support for BSS max idle period element
2017-04-28 12:28:45 +02:00
bridge: add per-port broadcast flood flag
2017-04-27 16:34:29 -04:00
Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
2017-05-03 08:50:52 -07:00
genirq: Return the IRQ name from free_irq()
2017-04-18 13:40:00 -05:00
linux/io.h: Add pci_remap_cfgspace() interface
2017-04-19 13:58:51 -05:00
ext2, ext4, xfs: retrieve dax_device for iomap operations
2017-04-25 13:20:46 -07:00
Merge branches 'arm/exynos', 'arm/omap', 'arm/rockchip', 'arm/mediatek', 'arm/smmu', 'arm/core', 'x86/vt-d', 'x86/amd' and 'core' into next
2017-05-04 18:06:17 +02:00
sysv,ipc: cacheline align kern_ipc_perm
2017-05-08 17:15:12 -07:00
jbd2: mark the transaction context with the scope GFP_NOFS context
2017-05-03 15:52:09 -07:00
jiffies.h: declare jiffies and jiffies_64 with ____cacheline_aligned_in_smp
2017-05-08 17:15:10 -07:00
Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6
2017-05-02 15:53:46 -07:00
crash: move crashkernel parsing and vmcore related code under CONFIG_CRASH_CORE
2017-05-08 17:15:11 -07:00
powerpc updates for 4.12 part 1.
2017-05-05 11:36:44 -07:00
kref: remove WARN_ON for NULL release functions
2017-05-08 17:15:14 -07:00
mm: make rmap_walk() return void
2017-05-03 15:52:10 -07:00
Merge branch 'core-rcu-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
2017-05-10 10:30:46 -07:00
leds: pca9532: Extend pca9532 device tree support
2017-04-19 20:27:50 +02:00
libnvdimm: convert NDD_ flags to use bitops, introduce NDD_LOCKED
2017-05-04 14:01:24 -07:00
lightnvm: allow to init targets on factory mode
2017-04-16 10:06:25 -06:00
mm: memcontrol: use node page state naming scheme for memcg
2017-05-03 15:52:11 -07:00
include/linux/migrate.h: add arg names to prototype
2017-05-03 15:52:10 -07:00
treewide: use kv[mz]alloc* rather than opencoded variants
2017-05-08 17:15:13 -07:00
mm, compaction: change migrate_async_suitable() to suitable_migration_source()
2017-05-08 17:15:10 -07:00
Modules updates for v4.12
2017-05-03 19:12:27 -07:00
flow_dissector: add mpls support (v2)
2017-04-24 14:30:46 -04:00
l2tp: device MTU setup, tunnel socket needs a lock
2017-04-17 13:01:48 -04:00
xdp: propagate extended ack to XDP setup
2017-05-01 10:35:47 -04:00
xdp: use common helper for netlink extended ack reporting
2017-05-03 09:51:24 -04:00
nfs: Convert to separately allocated bdi
2017-04-20 12:09:55 -06:00
nvmet_fc: Rework target side abort handling
2017-04-21 16:41:51 +02:00
nvme: improve performance for virtual NVMe devices
2017-04-21 16:41:47 +02:00
powerpc updates for 4.12 part 1.
2017-05-05 11:36:44 -07:00
IOMMU Updates for Linux v4.12
2017-05-09 15:15:47 -07:00
of: fix sparse warnings in fdt, irq, reserved mem, and resolver code
2017-05-04 14:01:13 -05:00
mm, page_alloc: count movable pages when stealing from pageblock
2017-05-08 17:15:10 -07:00
PCI: Change pci_host_common_probe() visibility
2017-04-18 14:21:04 -05:00
pci-v4.12-changes
2017-05-08 19:03:25 -07:00
PCI: Add device IDs for DRA74x and DRA72x
2017-04-28 10:23:19 -05:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2017-04-26 22:39:08 -04:00
ARM: SoC driver updates
2017-05-09 10:01:15 -07:00
PM / wakeup: Integrate mechanism to abort transitions in progress
2017-05-05 22:54:28 +02:00
x86, dax, pmem: remove indirection around memcpy_from_pmem()
2017-04-25 13:20:46 -07:00
move compat select-related syscalls to fs/select.c
2017-04-17 12:52:22 -04:00
crash: move crashkernel parsing and vmcore related code under CONFIG_CRASH_CORE
2017-05-08 17:15:11 -07:00
pidns: expose task pid_ns_for_children to userspace
2017-05-08 17:15:12 -07:00
quota: Remove dquot_quotactl_ops
2017-04-19 14:21:23 +02:00
srcu: Move rcu_init_levelspread() to rcu_tree_node.h
2017-04-18 11:38:20 -07:00
srcu: Debloat the <linux/rcu_segcblist.h> header
2017-05-02 06:29:22 -07:00
hlist_add_tail_rcu disable sparse warning
2017-04-19 09:29:18 -07:00
Merge branch 'core-rcu-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
2017-05-10 10:30:46 -07:00
rcu: Make non-preemptive schedule be Tasks RCU quiescent state
2017-04-21 05:59:27 -07:00
rcu: Make non-preemptive schedule be Tasks RCU quiescent state
2017-04-21 05:59:27 -07:00
rhashtable: compact struct rhashtable_params
2017-05-01 16:22:40 -04:00
ring-buffer: Return reader page back into existing ring buffer
2017-05-01 10:26:40 -04:00
mm: remove SWAP_[SUCCESS|AGAIN|FAIL]
2017-05-03 15:52:10 -07:00
mm: remove rodata_test_data export, add pr_fmt
2017-05-03 15:52:09 -07:00
Staging/IIO patches for 4.12-rc1
2017-05-05 18:16:23 -07:00
sysv,ipc: cacheline align kern_ipc_perm
2017-05-08 17:15:12 -07:00
TTY/Serial patches for 4.12-rc1
2017-05-08 18:49:23 -07:00
signal: Remove unused definition of sig_user_definied
2017-04-17 21:53:19 -05:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next
2017-05-02 16:40:27 -07:00
mm: Rename SLAB_DESTROY_BY_RCU to SLAB_TYPESAFE_BY_RCU
2017-04-18 11:42:36 -07:00
srcu: Introduce CLASSIC_SRCU Kconfig option
2017-04-18 11:38:23 -07:00
srcu: Make rcutorture writer stalls print SRCU GP state
2017-04-26 11:23:28 -07:00
srcu: Make rcutorture writer stalls print SRCU GP state
2017-04-26 11:23:28 -07:00
srcu: Specify auto-expedite holdoff time
2017-04-26 16:32:17 -07:00
libnvdimm for 4.12
2017-05-05 18:49:20 -07:00
ACPI / sleep: Ignore spurious SCI wakeups from suspend-to-idle
2017-05-05 22:54:28 +02:00
mm, swap: remove unused function prototype
2017-05-03 15:52:11 -07:00
sysctl: Remove dead register_sysctl_root
2017-04-16 23:42:49 -05:00
tcp: switch rcv_rtt_est and rcvq_space to high resolution timestamps
2017-04-26 14:44:39 -04:00
A couple hardened usercopy changes:
2017-05-02 10:45:15 -07:00
time: delete CURRENT_TIME_SEC and CURRENT_TIME
2017-05-08 17:15:15 -07:00
tty: split job control support into a file of its own
2017-04-18 18:01:52 +02:00
types: Update obsolete callback_head comment
2017-04-19 09:29:17 -07:00
include/linux/uaccess.h: remove expensive WARN_ON in pagefault_disabled_dec
2017-05-08 17:15:14 -07:00
usb: fix some references for /proc/bus/usb
2017-04-18 16:54:19 +02:00
VSOCK: Add virtio vsock vsockmon hooks
2017-04-24 12:35:56 -04:00
mm: move MADV_FREE pages into LRU_INACTIVE_FILE list
2017-05-03 15:52:08 -07:00
mm, vmalloc: properly track vmalloc users
2017-05-08 17:15:12 -07:00
