Add a pattern property to allow a device to request an alternate access rights configuration to one or more firewall controllers. It allows run-time controller reconfiguration of access rights to an authorized entity as use in OP-TEE OS [1]. Signed-off-by: Gatien Chevallier <gatien.chevallier@xxxxxxxxxxx> Link: https://github.com/OP-TEE/optee_os/pull/6946 [1] --- Changes in V2: - Addition of #access-conf-cells property --- .../access-controllers/access-controllers.yaml | 31 ++++++++++++++++++++++ 1 file changed, 31 insertions(+) diff --git a/Documentation/devicetree/bindings/access-controllers/access-controllers.yaml b/Documentation/devicetree/bindings/access-controllers/access-controllers.yaml index 99e2865f0e46a0600ebbba3bc5771dc63d578c8b..304eecc79db8ae98a0330b3ec186e29832fb8c87 100644 --- a/Documentation/devicetree/bindings/access-controllers/access-controllers.yaml +++ b/Documentation/devicetree/bindings/access-controllers/access-controllers.yaml @@ -45,6 +45,12 @@ properties: Can be any value as specified by device tree binding documentation of a particular provider. The node is an access controller. + "#access-conf-cells": + description: + Number of cells in an *(?<=)-access-conf$ specifier; + Can be any value as specified by device tree binding documentation + of a particular provider. The node is an access controller. + access-controller-names: $ref: /schemas/types.yaml#/definitions/string-array description: @@ -58,6 +64,16 @@ properties: A list of access controller specifiers, as defined by the bindings of the access-controllers provider. +patternProperties: + ".*(?<=)-access-conf$": + $ref: /schemas/types.yaml#/definitions/phandle-array + description: + An access controller configuration contains a list of inseparable entries. + A configuration may reference multiple access controllers. Therefore, each + entry content may vary accordingly to the access controller + "#access-conf-cells" value. A consumer will use this property to be able + to dynamically query for an access rights update. + additionalProperties: true examples: @@ -65,6 +81,7 @@ examples: clock_controller: access-controllers@50000 { reg = <0x50000 0x400>; #access-controller-cells = <2>; + #access-conf-cells = <2>; }; bus_controller: bus@60000 { @@ -73,6 +90,7 @@ examples: #size-cells = <1>; ranges; #access-controller-cells = <3>; + #access-conf-cells = <2>; uart4: serial@60100 { reg = <0x60100 0x400>; @@ -81,4 +99,17 @@ examples: <&bus_controller 1 3 5>; access-controller-names = "clock", "bus"; }; + + uart5: serial@60200 { + reg = <0x60200 0x400>; + clocks = <&clk_serial2>; + access-controllers = <&bus_controller 0 0 0>, <&bus_controller 1 0 0>, + <&clock_controller 2 3>; + default-access-conf = <&bus_controller 0 10>, + <&bus_controller 1 10>, + <&clock_controller 0 0>; + shared-access-conf = <&bus_controller 0 256>, + <&bus_controller 1 256>, + <&clock_controller 0 256>; + }; }; --- base-commit: 42f7652d3eb527d03665b09edac47f85fb600924 change-id: 20241025-firewall-conf-v2-c7074b3019bf Best regards, -- Gatien Chevallier <gatien.chevallier@xxxxxxxxxxx>