From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Thu, 11 Dec 2025 16:55:29 +0100 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1vTj0r-00ALRc-1t for lore@lore.pengutronix.de; Thu, 11 Dec 2025 16:55:29 +0100 Received: from localhost ([127.0.0.1] helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1vTj0q-0006zU-Vy; Thu, 11 Dec 2025 16:55:29 +0100 Received: from drehscheibe.grey.stw.pengutronix.de ([2a0a:edc0:0:c01:1d::a2]) by metis.whiteo.stw.pengutronix.de with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1vTj0n-0006z9-2d; Thu, 11 Dec 2025 16:55:25 +0100 Received: from dude05.red.stw.pengutronix.de ([2a0a:edc0:0:1101:1d::54]) by drehscheibe.grey.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1vTj0m-0059Tg-2q; Thu, 11 Dec 2025 16:55:24 +0100 Received: from mol by dude05.red.stw.pengutronix.de with local (Exim 4.98.2) (envelope-from ) id 1vTj0m-00000003JPE-3Qqb; Thu, 11 Dec 2025 16:55:24 +0100 From: Michael Olbrich To: distrokit@pengutronix.de Date: Thu, 11 Dec 2025 16:55:22 +0100 Message-ID: <20251211155522.788108-1-m.olbrich@pengutronix.de> X-Mailer: git-send-email 2.47.3 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Subject: [DistroKit] [PATCH] ptxconfig: optee: disable detached user TAs X-BeenThere: distrokit@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: DistroKit Mailinglist List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: Michael Olbrich Sender: "DistroKit" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: distrokit-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false Detached user TAs loaded from a Linux filesystem via tee-supplicant are signed so that OP-TEE can verify their integrity and authenticity before execution. There are no such TAs in the BSP so we don't need the support for those, so just disable it. This silences our sanity checker that correctly complains that this is not needed. Signed-off-by: Michael Olbrich --- configs/platform-v7a/platformconfig | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/configs/platform-v7a/platformconfig b/configs/platform-v7a/platformconfig index 221dfa16dfef..bdcb8a2a8e92 100644 --- a/configs/platform-v7a/platformconfig +++ b/configs/platform-v7a/platformconfig @@ -223,7 +223,7 @@ PTXCONF_BOOTLOADER=y PTXCONF_OPTEE=y PTXCONF_OPTEE_PLATFORM="stm32mp1" PTXCONF_OPTEE_PLATFORM_FLAVOUR="135F_DK" -PTXCONF_OPTEE_CFG="CFG_TEE_CORE_LOG_LEVEL=2 CFG_WITH_PAGER=n CFG_GP_SOCKETS=n CFG_TA_MBEDTLS_SELF_TEST=n" +PTXCONF_OPTEE_CFG="CFG_TEE_CORE_LOG_LEVEL=2 CFG_WITH_PAGER=n CFG_GP_SOCKETS=n CFG_TA_MBEDTLS_SELF_TEST=n CFG_REE_FS_TA=n" # PTXCONF_OPTEE_INSTALL_USER_TAS is not set PTXCONF_TF_A_STM32MP13=y PTXCONF_TF_A=y -- 2.47.3