Re: [ptxdist] [PATCH 3/4] optee-client: bump to 3.16.0

[Michael Olbrich <m.olbrich@pengutronix.de>]

On Fri, Mar 25, 2022 at 09:34:10AM +0100, Rouven Czerwinski wrote:
> On Fri, 2022-03-25 at 09:03 +0100, Michael Olbrich wrote:
> > On Wed, Mar 23, 2022 at 12:06:39PM +0100, Rouven Czerwinski wrote:
> > > Only a bump, no other adjustments necessary.
> > 
> > So my check scripts complain because tee-supplicant has an rpath that does
> > not exist: /usr/lib/tee-supplicant/plugins.
> > 
> > It is used to load plugins from that directory (dlopen() uses the rpath if
> > filename without path is used).
> > 
> > I'm not sure how this should be handled. Do we need plugins at all? It
> > seems optional. Add an option that should be selected by plugins?
> > Are there any security implications?
> 
> There are, since the op-tee client will load any plugins installed into
> this directory. This can be disabled with CFG_TEE_SUPP_PLUGINS=n, which
> should be added to the makefile and should remove your warning. Should
> I sent a v2 or do you want to fixup locally?

I'll fix it locally.

> > If necessary I'll just ignore this in my checks, but before I do that, I
> > want to make sure that this is actually correct.
> 
> Thanks for checking! I don't think we need plugin support at this
> point, so we should disable it as long as it stays unused.

Sounds good to me.

Michael

-- 
Pengutronix e.K.                           |                             |
Steuerwalder Str. 21                       | http://www.pengutronix.de/  |
31137 Hildesheim, Germany                  | Phone: +49-5121-206917-0    |
Amtsgericht Hildesheim, HRA 2686           | Fax:   +49-5121-206917-5555 |

_______________________________________________
ptxdist mailing list
ptxdist@pengutronix.de
To unsubscribe, send a mail with subject "unsubscribe" to ptxdist-request@pengutronix.de