28 lines · plain
1# SPDX-License-Identifier: GPL-2.0-only2# OP-TEE Trusted Execution Environment Configuration3config OPTEE4 tristate "OP-TEE"5 depends on HAVE_ARM_SMCCC6 depends on MMU7 depends on RPMB || !RPMB8 help9 This implements the OP-TEE Trusted Execution Environment (TEE)10 driver.11 12config OPTEE_INSECURE_LOAD_IMAGE13 bool "Load OP-TEE image as firmware"14 default n15 depends on OPTEE && ARM6416 help17 This loads the BL32 image for OP-TEE as firmware when the driver is18 probed. This returns -EPROBE_DEFER until the firmware is loadable from19 the filesystem which is determined by checking the system_state until20 it is in SYSTEM_RUNNING. This also requires enabling the corresponding21 option in Trusted Firmware for Arm. The documentation there explains22 the security threat associated with enabling this as well as23 mitigations at the firmware and platform level.24 https://trustedfirmware-a.readthedocs.io/en/latest/threat_model/threat_model.html25 26 Additional documentation on kernel security risks are at27 Documentation/tee/op-tee.rst.28