R36.3:how to disable firewall

[Michaellovemilk]

Hello, I would like to dump some NVCSI-related registers in version R36.3 to help me debug and locate issues. However, it seems that the file structure in version R36.3 has undergone some changes. Could you please advise on how to disable the firewall in the new version to access NVCSI-related registers smoothly?

[JerryChang]

hello Michaellovemilk,

it’s tegra234-mb2-bct-scr-p3701-0000.dts to load firewall config for Orin series.
due to the target name has changed to generic since rel-36 release version.
hence, you should see the firewall config as following.
for exmaple, $OUT/Linux_for_Tegra/bootloader/generic/BCT/tegra234-firewall-config-base.dtsi

furthermore,
it’s suggested to update the settings via override file, i.e. tegra234-mb2-bct-scr-p3701-0000-override.dts.
please include below settings for un-blocking NVCSI register read/write.

         reg@4673 { /* CBB_FABRIC, CBB_CENTRAL_CBB_FIREWALL_NVCSI_ENGINE_BLF, READ_CTL */
             exclusion-info = <0>;
         };
         reg@4674 { /* CBB_FABRIC, CBB_CENTRAL_CBB_FIREWALL_NVCSI_ENGINE_BLF, WRITE_CTL */
             exclusion-info = <0>;
         };
         reg@4675 { /* CBB_FABRIC, CBB_CENTRAL_CBB_FIREWALL_NVCSI_ENGINE_BLF, CTL_SETTING */
             exclusion-info = <0>;
         };

you should perform full-flash to update the OEM firewall config.
besides, assume you’ve flashed the target before, there’s system image on your local host machine, you may adding -r options to skips building system.img; for speed-up flashing process.
for instance,
$ sudo ./flash.sh -r jetson-agx-orin-devkit mmcblk0p1