CONFIG_OPTEE_INSECURE_LOAD_IMAGE: Load OP-TEE image as firmware

General informations

The Linux kernel configuration item CONFIG_OPTEE_INSECURE_LOAD_IMAGE:

• prompt: Load OP-TEE image as firmware
• type: bool
• depends on: CONFIG_OPTEE && CONFIG_ARM64
• defined in drivers/tee/optee/Kconfig
• found in Linux kernels: 6.4–6.8, 6.9-rc+HEAD

Help text

This loads the BL32 image for OP-TEE as firmware when the driver is probed. This returns -EPROBE_DEFER until the firmware is loadable from the filesystem which is determined by checking the system_state until it is in SYSTEM_RUNNING. This also requires enabling the corresponding option in Trusted Firmware for Arm. The documentation there explains the security threat associated with enabling this as well as mitigations at the firmware and platform level. https://trustedfirmware-a.readthedocs.io/en/latest/threat_model/threat_model.html

Additional documentation on kernel security risks are at Documentation/tee/op-tee.rst.

Hardware

LKDDb

Raw data from LKDDb:

• (none)

Sources

This page is automaticly generated with free (libre, open) software lkddb(see lkddb-sources).

The data is retrived from:

• Linux kernel
• Linux Kernel Driver DataBase (LKDDb)

Automatic links from Google (and ads)

Custom Search

Popular queries: