From: "Sven Püschel" <s.pueschel@pengutronix.de>
To: ptxdist@pengutronix.de
Cc: "Sven Püschel" <s.pueschel@pengutronix.de>,
"Michael Tretter" <m.tretter@pengutronix.de>
Subject: [ptxdist] [PATCH] optee-client: add config option for RPMB emulation
Date: Wed, 19 Nov 2025 11:57:57 +0100 [thread overview]
Message-ID: <20251119105801.208295-1-s.pueschel@pengutronix.de> (raw)
From: Michael Tretter <m.tretter@pengutronix.de>
RPMB emulation is enabled by default in the tee-supplicant. In a
production system, the RPMB shall be backed by the eMMC.
Add an option to disable RPMB emulation.
Signed-off-by: Michael Tretter <m.tretter@pengutronix.de>
Signed-off-by: Sven Püschel <s.pueschel@pengutronix.de>
---
rules/optee-client.in | 7 +++++++
rules/optee-client.make | 2 +-
2 files changed, 8 insertions(+), 1 deletion(-)
diff --git a/rules/optee-client.in b/rules/optee-client.in
index cb1033cb0..b68e068d9 100644
--- a/rules/optee-client.in
+++ b/rules/optee-client.in
@@ -26,4 +26,11 @@ config OPTEE_CLIENT_SUPPLICANT_PLUGINS
bool
prompt "enable TEE supplicant plugins"
+config OPTEE_CLIENT_SUPPLICANT_RPMB_EMULATION
+ bool
+ default y
+ prompt "enable TEE supplicant RPMB emulation"
+ help
+ Emulate the RPMB in the TEE supplicant instead of using the eMMC.
+
endif
diff --git a/rules/optee-client.make b/rules/optee-client.make
index c884000d6..1bbd1ce63 100644
--- a/rules/optee-client.make
+++ b/rules/optee-client.make
@@ -48,7 +48,7 @@ OPTEE_CLIENT_CONF_OPT := \
-DCFG_TEE_SUPP_LOG_LEVEL=1 \
-DCFG_TEE_SUPP_PLUGINS=$(call ptx/onoff, PTXCONF_OPTEE_CLIENT_SUPPLICANT_PLUGINS) \
-DCFG_WERROR=ON \
- -DRPMB_EMU=ON \
+ -DRPMB_EMU=$(call ptx/onoff, PTXCONF_OPTEE_CLIENT_SUPPLICANT_RPMB_EMULATION) \
-DWITH_TEEACL=ON
# ----------------------------------------------------------------------------
--
2.47.3
next reply other threads:[~2025-11-19 10:58 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2025-11-19 10:57 Sven Püschel [this message]
2025-11-27 11:06 ` Michael Olbrich
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20251119105801.208295-1-s.pueschel@pengutronix.de \
--to=s.pueschel@pengutronix.de \
--cc=m.tretter@pengutronix.de \
--cc=ptxdist@pengutronix.de \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox