[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Qemu-devel] [PATCH v4 00/15] target-arm: Add CPU security extension ena
From: |
Greg Bellows |
Subject: |
[Qemu-devel] [PATCH v4 00/15] target-arm: Add CPU security extension enablement |
Date: |
Mon, 15 Dec 2014 17:09:37 -0600 |
This patchset adds functionality for enabling the ARM CPU security extensions.
At this time, the only machines supported are Versatile Express and the QEMU
ARM virtual machines both with Cortex A9 & A15.
The patchset establishes the default security state along with adding
overriding controls of the state. Booting with the "-kernel" QEMU command line
option will start by default in non-secure state with EL3 support disabled.
Booting with the "-bios" QEMU command line option will default to
secure state with EL3 features enabled. An added "secure" machine property
may be set to either 'on' or 'off' to override this default behavior. For
example, the below command line syntax would disable security extensions...
aarch64-softmmu/qemu-system-aarch64
-machine type=vexpress-a15,secure=off -kernel ...
In order to add the machine specific 'secure' property, the vexpress machine
object creation functionality needed to be updated. The existing QEMU machine
mechanism was replaced with proper type, class, and instance usage.
This patchset is dependent on the following two patchsets for proper operation.
Add these prior to adding this patchset.
<address@hidden>
<address@hidden>
v3 -> v4
- Fix botched message change, move to correct patch.
v2 -> v3
- Ignore missing has_el3 errors
- Revise secure machine property description
- Fix has_el3 initialization
- Fix typos
v1 -> v2
- Added disablement of CPU EL3 on all machines that could potentially use an
EL3 enabled CPU.
- Switched/Added default states for vexpress and virt machines
- Made the vexpress machine type abstract
- Removed static declaration of the machine property
- Renamed CPU "secure" property to "has_el3"
- Added arm_boot_info secure_boot field to communicate whether the secure state
on a Linux boot needs to be updated. By default Vexpress defaults to secure
and virt defaults to non-secure.
Fabian Aggeler (1):
target-arm: add cpu feature EL3 to CPUs with Security Extensions
Greg Bellows (14):
target-arm: Add vexpress class and machine types
target-arm: Add vexpress a9 & a15 machine objects
target-arm: Switch to common vexpress machine init
target-arm: Add vexpress machine secure property
target-arm: Change vexpress daughterboard init arg
target-arm: Add virt class and machine types
target-arm: Add virt machine secure property
target-arm: Add feature unset function
target-arm: Add ARMCPU secure property
target-arm: Add arm_boot_info secure_boot control
target-arm: Enable CPU has_el3 prop during VE init
target-arm: Set CPU has_el3 prop during virt init
target-arm: Breakout integratorcp and versatilepb cpu init
target-arm: Disable EL3 on unsupported machines
hw/arm/boot.c | 10 ++++
hw/arm/exynos4210.c | 11 ++++
hw/arm/highbank.c | 12 +++++
hw/arm/integratorcp.c | 31 ++++++++++-
hw/arm/realview.c | 12 +++++
hw/arm/versatilepb.c | 32 +++++++++++-
hw/arm/vexpress.c | 141 ++++++++++++++++++++++++++++++++++++++++----------
hw/arm/virt.c | 75 ++++++++++++++++++++++++---
hw/arm/xilinx_zynq.c | 12 +++++
include/hw/arm/arm.h | 4 ++
target-arm/cpu-qom.h | 2 +
target-arm/cpu.c | 32 ++++++++++++
12 files changed, 336 insertions(+), 38 deletions(-)
--
1.8.3.2
- [Qemu-devel] [PATCH v4 00/15] target-arm: Add CPU security extension enablement,
Greg Bellows <=
- [Qemu-devel] [PATCH v4 01/15] target-arm: Add vexpress class and machine types, Greg Bellows, 2014/12/15
- [Qemu-devel] [PATCH v4 02/15] target-arm: Add vexpress a9 & a15 machine objects, Greg Bellows, 2014/12/15
- [Qemu-devel] [PATCH v4 03/15] target-arm: Switch to common vexpress machine init, Greg Bellows, 2014/12/15
- [Qemu-devel] [PATCH v4 05/15] target-arm: Change vexpress daughterboard init arg, Greg Bellows, 2014/12/15
- [Qemu-devel] [PATCH v4 04/15] target-arm: Add vexpress machine secure property, Greg Bellows, 2014/12/15
- [Qemu-devel] [PATCH v4 06/15] target-arm: Add virt class and machine types, Greg Bellows, 2014/12/15
- [Qemu-devel] [PATCH v4 07/15] target-arm: Add virt machine secure property, Greg Bellows, 2014/12/15
- [Qemu-devel] [PATCH v4 08/15] target-arm: Add feature unset function, Greg Bellows, 2014/12/15
- [Qemu-devel] [PATCH v4 09/15] target-arm: Add ARMCPU secure property, Greg Bellows, 2014/12/15
- [Qemu-devel] [PATCH v4 10/15] target-arm: Add arm_boot_info secure_boot control, Greg Bellows, 2014/12/15