Hi,
I am trying to access normal world memory from secure world. Similar issues i found for OP-TEE:
opened 09:10PM - 08 Feb 17 UTC
closed 08:22PM - 27 Feb 17 UTC
Hi there,
I'm trying to develop a security tool in trusted world for conducting integrity check about the normal OS's kernel. By...
opened 08:55AM - 21 Jul 15 UTC
closed 01:06PM - 22 Dec 15 UTC
Hi all,
Quick question: is it possible to access a physical address from the TA? I see you are using a MMU...
opened 12:45AM - 21 May 16 UTC
closed 01:06AM - 22 Jun 16 UTC
Hi,
I am doing some experiments to use secure world to inspect the normal world. I have successfully mapped the normal world...
So far reading above issues, i found mapping normal world memory to secure world would work. But i am clueless how to do that in Trusty.
Assume the following scenario:
NW kernel sends a variable address and SW will change the value at that address.
Here is what I think needs to be done.
Map NW memory to SW.
NW kernel sends two things to SW via smc
a) physical address of its page table
b) virtual address of a variable "var_a " located in heap.
In SW, do a software NW kernel page walk. Get physical address of var_a. Convert it to SW virtual memory and change the value.
Is this correct or am I missing something?
Also how to do point 1 and 3?
Thanks.
Hi,
We have trusty samples in public source package. Please check
https://developer.nvidia.com/embedded/dlc/r32-3-1_Release_v1.0/Sources/T186/public_sources.tbz2
The samples has to be run with secure OS enabled. The package of enabling secure OS is
https://developer.nvidia.com/embedded/dlc/r32-3-1_Release_v1.0/t186ref_release_aarch64/secureboot_R32.3.1_aarch64.tbz2
Please take a look. Suggest develop your applications based on the trusty samples.
Hi DaneLLL,
Thanks for your reply, but it does not answer anything to what I asked.
Trusty samples won’t help in achieving what I am looking for.
Kindly point me to some documentation which will help me.
Hi,
What we have implemented is described in development guide . Please take a look, If it does not meet your requirement, may see if other users can share suggestion/experience.