Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Trustzone setting #4204

Open
TychoVrahe opened this issue Sep 23, 2024 · 0 comments
Open

Trustzone setting #4204

TychoVrahe opened this issue Sep 23, 2024 · 0 comments
Labels
code Code improvements

Comments

@TychoVrahe
Copy link
Contributor

Followup for #4188

Now that wee have properly split kernel-firmware, we can improve security on cortex-m33 models by properly setting trustzone to reflect privileged-unprivileged division in firmware.

Currently everything is set as unprivileged, but we do need to change it so that

  • peripherals are mostly privileged, with possible exception of DMA2D, GFXMMU.
  • RAM is set according to kernel/coreapp split
  • FLASH is set according to kernel/coreapp split
@TychoVrahe TychoVrahe added the code Code improvements label Sep 23, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
code Code improvements
Projects
Firmware
Status: No status
Milestone
No milestone
Development

No branches or pull requests
1 participant
@TychoVrahe