Linux-ARM-Kernel Archive on lore.kernel.org
 help / color / mirror / Atom feed
From: "Arnd Bergmann" <arnd@arndb.de>
To: pankaj.gupta@oss.nxp.com, "Jonathan Corbet" <corbet@lwn.net>,
	"Shuah Khan" <skhan@linuxfoundation.org>,
	"Rob Herring" <robh@kernel.org>,
	"Krzysztof Kozlowski" <krzk+dt@kernel.org>,
	"Conor Dooley" <conor+dt@kernel.org>,
	"Frank Li" <Frank.Li@nxp.com>,
	"Sascha Hauer" <s.hauer@pengutronix.de>,
	"Pengutronix Kernel Team" <kernel@pengutronix.de>,
	"Fabio Estevam" <festevam@gmail.com>,
	"Pankaj Gupta" <pankaj.gupta@nxp.com>,
	"Randy Dunlap" <rdunlap@infradead.org>
Cc: linux-doc@vger.kernel.org, linux-kernel@vger.kernel.org,
	devicetree@vger.kernel.org, imx@lists.linux.dev,
	linux-arm-kernel@lists.infradead.org
Subject: Re: [PATCH v51 5/7] firmware: imx: adds miscdev
Date: Wed, 16 Sep 2026 15:16:13 +0200	[thread overview]
Message-ID: <2034fb2f-f169-46a5-85e8-fa723ddb0360@app.fastmail.com> (raw)
In-Reply-To: <20260915-imx-se-if-v51-5-4a7dac612cb5@nxp.com>

On Mon, Sep 14, 2026, at 21:40, pankaj.gupta@oss.nxp.com wrote:
> From: Pankaj Gupta <pankaj.gupta@nxp.com>
>
> Adds the driver for communication interface to secure-enclave, that
> enables exchanging messages with NXP secure enclave HW IP(s)
> like EdgeLock Enclave, from:
> - User-Space Applications via character driver.
>
> ABI documentation for the NXP secure-enclave driver.

I just saw this in linux-next, where it has caused a build failure
for a missing include of linux/slab.h. I hadn't see the series
before (even though it is a v51, which seems crazy), but I am
curious about it now.

> User-space library using this driver:
> - i.MX Secure Enclave library:
>   -- URL: https://github.com/nxp-imx/imx-secure-enclave.git,
> - i.MX Secure Middle-Ware:
>   -- URL: https://github.com/nxp-imx/imx-smw.git

I assume this will hit the soc tree eventually, so I want to
make sure the reviews have covered all the important aspects here,
and I don't see the answers in the cover letter:

- Who has reviewed the user interface from outside of NXP?
  Since this is not a vendor-independent API, I think we have
  to be extra careful and make sure this does not duplicate
  anything that is already in the standard firmware interfaces.

- Why is there a low-level passthrough to the firmware from
  userspace? This looks rather irregular, since it is the kernel's
  job to abstract the platform and provide vendor-independent
  interfaces. In particular the bit about shared memory and
  the generic send/receiv ioctl look like they should not
  be there, as those would allow side-channels from userspace.

      Arnd


  parent reply	other threads:[~2026-09-16 13:17 UTC|newest]

Thread overview: 10+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
     [not found] <20260915-imx-se-if-v51-0-4a7dac612cb5@nxp.com>
2026-09-14 19:39 ` [PATCH v51 1/7] Documentation/firmware: add imx/se to other_interfaces pankaj.gupta
2026-09-14 19:39 ` [PATCH v51 2/7] dt-bindings: arm: fsl: add imx-se-fw binding doc pankaj.gupta
2026-09-14 19:40 ` [PATCH v51 3/7] firmware: imx: add driver for NXP EdgeLock Enclave pankaj.gupta
2026-09-14 19:40 ` [PATCH v51 4/7] firmware: imx: device context dedicated to priv pankaj.gupta
2026-09-14 19:40 ` [PATCH v51 6/7] arm64: dts: imx8ulp: add secure enclave node pankaj.gupta
2026-09-14 19:40 ` [PATCH v51 7/7] arm64: dts: imx8ulp: add reserved memory for EdgeLock Enclave pankaj.gupta
     [not found] ` <20260915-imx-se-if-v51-5-4a7dac612cb5@nxp.com>
2026-09-16 13:16   ` Arnd Bergmann [this message]
2026-09-16 14:39     ` [PATCH v51 5/7] firmware: imx: adds miscdev Frank Li
2026-10-05 14:28       ` Frieder Schrempf
2026-09-24 16:14     ` [EXT] " Pankaj Gupta

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=2034fb2f-f169-46a5-85e8-fa723ddb0360@app.fastmail.com \
    --to=arnd@arndb.de \
    --cc=Frank.Li@nxp.com \
    --cc=conor+dt@kernel.org \
    --cc=corbet@lwn.net \
    --cc=devicetree@vger.kernel.org \
    --cc=festevam@gmail.com \
    --cc=imx@lists.linux.dev \
    --cc=kernel@pengutronix.de \
    --cc=krzk+dt@kernel.org \
    --cc=linux-arm-kernel@lists.infradead.org \
    --cc=linux-doc@vger.kernel.org \
    --cc=linux-kernel@vger.kernel.org \
    --cc=pankaj.gupta@nxp.com \
    --cc=pankaj.gupta@oss.nxp.com \
    --cc=rdunlap@infradead.org \
    --cc=robh@kernel.org \
    --cc=s.hauer@pengutronix.de \
    --cc=skhan@linuxfoundation.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox