Skip to content

FROMLIST: Add TEE based client driver for UEFI Secure Application #1487

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
Harshal Dev (harshaldev27) wants to merge 6 commits into
base: tech/security/firmware-smc
Choose a base branch
from
Open

FROMLIST: Add TEE based client driver for UEFI Secure Application #1487

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
e6eba59
FROMLIST: tee: qcomtee: Track the object invocation context
harshaldev27 Jul 3, 2026
08a179a
FROMLIST: tee: Add kernel client object invoke helper
qc-azarrabi May 18, 2026
abda008
FROMLIST: tee: qcomtee: Allow object invokes from kernel clients
qc-azarrabi May 18, 2026
32c67d8
FROMLIST: tee: Export uuidv5 generation for TEE clients
harshaldev27 May 26, 2026
12311bf
FROMLIST: tee: qcomtee: Add support for registering QTEE services on …
harshaldev27 May 25, 2026
901176b
FROMLIST: firmware: qcom: Add support for TEE based EFI-var client dr…
harshaldev27 May 25, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 7 additions & 0 deletions MAINTAINERS
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -22068,6 +22068,13 @@ L: linux-arm-msm@vger.kernel.org
S: Maintained
F: drivers/firmware/qcom/qcom_qseecom_uefisecapp.c

QUALCOMM TEE UEFISECAPP DRIVER
M: Harshal Dev <harshal.dev@oss.qualcomm.com>
L: linux-arm-msm@vger.kernel.org
S: Maintained
F: drivers/firmware/qcom/qcom_tee_uefisecapp.c
F: drivers/firmware/qcom/qcom_tee_uefisecapp.h

QUALCOMM RMNET DRIVER
M: Subash Abhinov Kasiviswanathan <subash.a.kasiviswanathan@oss.qualcomm.com>
M: Sean Tranchetti <sean.tranchetti@oss.qualcomm.com>
Expand Down
24 changes: 24 additions & 0 deletions drivers/firmware/qcom/Kconfig
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -74,4 +74,28 @@ config QCOM_QSEECOM_UEFISECAPP
Select Y here to provide access to EFI variables on the aforementioned
platforms.

config QCOM_TEE_UEFISECAPP
tristate "Qualcomm TEE UEFI Secure App client driver"
depends on QCOMTEE
depends on EFI
depends on !QCOM_QSEECOM_UEFISECAPP
help
On Qualcomm SoC based platforms without emulated RPMB support,
specifically platforms where RPMB is not present within SPI-NOR storage
and instead located on UFS/EMMC storage, non-volatile EFI variables can
only be set via a callback request from the UEFI Secure Application to
the RPMB service running in user-space (within the QTEE supplicant:
github.com/qualcomm/minkipc). Unlike the QCOMTEE driver, the QSEECOM
driver used by the QSEECOM based uefisecapp does not support callback
requests. And so on these platforms, the TEE based uefisecapp client
driver must be used to ensure persistence of non-volatile EFI variables
via writes through the RPMB service hosted in the QTEE supplicant.

This module provides a TEE client driver for uefisecapp, installing efivar
operations to allow the kernel and user-space access to EFI variables.

Select m here to provide access to EFI variables on the aforementioned
platforms if your Linux distribution has QTEE supplicant installed and
running.

endmenu
1 change: 1 addition & 0 deletions drivers/firmware/qcom/Makefile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,3 +8,4 @@ qcom-scm-objs += qcom_scm.o qcom_scm-smc.o qcom_scm-legacy.o
obj-$(CONFIG_QCOM_TZMEM) += qcom_tzmem.o
obj-$(CONFIG_QCOM_QSEECOM) += qcom_qseecom.o
obj-$(CONFIG_QCOM_QSEECOM_UEFISECAPP) += qcom_qseecom_uefisecapp.o
obj-$(CONFIG_QCOM_TEE_UEFISECAPP) += qcom_tee_uefisecapp.o
Loading