Hello all,
I am in the process of adding ARM security extension support to QEMU and need a mechanism for enabling it and changing the boot default security state. In the case of ARM, the security extensions apply to multiple HW components (CPU, GIC, ...) so it makes the most sense to add a machine property. The question is more of what makes the most sense and is cleanest from the command line. The current plan is to make the new property machine specific but if others see value in making it more generic then I am open to adding it as such. Here are some possible command line syntax options:
- -machine type=vexpress-a15, extensions=security,foo,...
- This approach introduces a new "extensions" generic option that allows architectural machine specific options to be added easily and parsed as appropriate in the arch specific code.
- -machine type=vexpress-a15, security=on
- This approach introduces a more concrete "security" option that can be either specific to certain machines or generic.
I am open to other suggested approaches if any.
Regards,
Greg