optee_os/mk/config.mk

66 # are enabled, panic and assert messages are more verbose, data and prefetch
93 # When this feature is enabled, calling mdbg_check(1) will print a list of all
151 # This is the default FS when enabled (i.e., the one used when
155 # CFG_REE_FS_HTREE_HASH_SIZE_COMPAT, when enabled, supports the legacy
188 # When enabled, the cache stores the first 'CFG_RPMB_FS_CACHE_ENTRIES' FAT FS
234 _CFG_WITH_SECURE_STORAGE := $(call cfg-one-enabled,CFG_REE_FS CFG_RPMB_FS)
274 # With CFG_TA_FLOAT_SUPPORT enabled TA code is free use floating point types
279 # If CFG_UNWIND is enabled, both the kernel and user mode call stacks can be
321 # When this flag is enabled, the ELF loader will introduce a random offset
335 # When this flag is enabled, the early init code will introduce a random
364 _CFG_CORE_STACK_PROTECTOR := $(call cfg-one-enabled, CFG_CORE_STACK_PROTECTOR \
367 _CFG_TA_STACK_PROTECTOR := $(call cfg-one-enabled, CFG_TA_STACK_PROTECTOR \
390 # Warning: If enabled for release build then it will break rollback protection
443 # Enable paging, requires SRAM, can't be enabled by default
456 # CFG_UNWIND and CFG_LOCKDEP_RECORD_STACK are both enabled, the algorithm
464 # with the pager enabled or lockdep
465 CFG_CORE_BGET_BESTFIT ?= $(call cfg-one-enabled, CFG_WITH_PAGER CFG_LOCKDEP)
468 # Uses a lot of memory, can't be enabled by default
473 # lot of memory and need platform specific adaptations, can't be enabled by
485 # When enabled, most C functions check the stack pointer against the current
495 # When CFG_DT is enabled core embeds the FDT library (libfdt) allowing
498 # When CFG_DT is enabled, the TEE _start function expects to find
502 # When CFG_EXTERNAL_DT is enabled, the external device tree ABI is implemented
506 # When CFG_MAP_EXT_DT_SECURE is enabled the external device tree is expected to
509 # When CFG_EMBED_DTB is enabled, CFG_EMBED_DTB_SOURCE_FILE shall define the
540 # CFG_DT_CACHED_NODE_INFO, when enabled, parses the embedded DT at boot
565 _CFG_USE_DTB_OVERLAY := $(call cfg-one-enabled,CFG_EXTERNAL_DTB_OVERLAY \
574 # Embed transfer list support self test when enabled
575 CFG_TRANSFER_LIST_TEST ?= $(call cfg-all-enabled,CFG_TRANSFER_LIST \
581 # CFG_DT_DRIVER_EMBEDDED_TEST when enabled embedded DT driver probing tests.
594 # CFG_WITH_STATS when enabled embeds PTA statistics service to allow non-secure
598 # CFG_DRIVERS_DT_RECURSIVE_PROBE when enabled forces a recursive subnode
612 # is enabled
616 # When this option is enabled, OP-TEE can execute Trusted Applications
628 # When this option is enabled, OP-TEE can execute Trusted Applications
635 # When this option is enabled, OP-TEE core is instrumented with GCC's
642 # When this option is enabled, OP-TEE outputs the ftrace buffer to
666 # - Static libraries are still generated when this is enabled, but TAs will use
690 CFG_SECSTOR_TA ?= $(call cfg-all-enabled,CFG_REE_FS CFG_WITH_USER_TA)
694 CFG_SECSTOR_TA_MGMT_PTA ?= $(call cfg-all-enabled,CFG_SECSTOR_TA)
775 # When enabled, CFG_NS_VIRTUALIZATION embeds support for virtualization in
777 # in the non-secure world if this option is enabled.
781 # world has virtualization enabled.
815 # When enabled, CFG_SCMI_MSG_DRIVERS embeds SCMI message drivers in the core.
850 # CFG_SCMI_SCPFW, when enabled, embeds the reference SCMI server implementation
867 # CFG_SCMI_SCPFW_FROM_DT, when enabled, calls scpfw_configure() function
876 # When enabled, CFG_SCMI_MSG_USE_CLK embeds SCMI clocks registering services for
899 # When enabled checks that buffers passed to the GP Internal Core API
905 # When enabled accepts the DES key sizes excluding parity bits as in
924 # CFG_PREALLOC_RPC_CACHE, when enabled, makes core to preallocate
932 # When enabled, CFG_DRIVERS_CLK embeds a clock framework in OP-TEE core.
941 CFG_DRIVERS_CLK_DT ?= $(call cfg-all-enabled,CFG_DRIVERS_CLK CFG_DT)
949 # When enabled, CFG_DRIVERS_RSTCTRL embeds a reset controller framework in
953 # When enabled, CFG_DRIVERS_GPIO embeds a GPIO controller framework in
957 # When enabled, CFG_DRIVERS_I2C provides I2C controller and devices support.
960 # When enabled, CFG_DRIVERS_NVMEM provides a framework to register nvmem
964 # When enabled, CFG_DRIVERS_PINCTRL embeds a pin muxing controller framework in
969 # When enabled, CFG_DRIVERS_REGULATOR embeds a voltage regulator framework in
973 # When enabled, CFG_REGULATOR_FIXED embeds a voltage regulator driver for
976 # When enabled, CFG_REGULATOR_GPIO embeds a voltage regulator driver for
991 # When enabled, CFG_INSECURE permits insecure configuration of OP-TEE core
1036 ifeq (y-y,$(CFG_NS_VIRTUALIZATION)-$(call cfg-one-enabled, CFG_TA_BTI CFG_CORE_BTI))
1088 CFG_NOTIF_TEST_WD ?= $(call cfg-all-enabled,CFG_ENABLE_EMBEDDED_TESTS \
1107 # this option is enabled, TEE core will initialize secret keys per TA.
1168 # is enabled.
1186 # When this option is enabled, OP-TEE provides a debug method for
1215 # CFG_RSA_PUB_EXPONENT_3, when enabled, allows RSA public exponents in the
1229 # CFG_MULTI_CORE_HALTING, when enabled, registers an interrupt handler for the
1237 # CFG_HALT_CORES_ON_PANIC, when enabled, makes any call to panic() halt the
1249 # CFG_DRIVERS_REMOTEPROC, when enabled, embeds support for remote processor
1253 # CFG_REMOTEPROC_PTA, when enabled, embeds remote processor management PTA
1257 # When enabled, CFG_WIDEVINE_HUK uses the widevine HUK provided by secure
1262 # When enabled, CFG_WIDEVINE_PTA embeds a PTA that exposes the keys under
1267 # When enabled, CFG_VERAISON_ATTESTATION_PTA embeds remote attestation PTA
1275 # When enabled, CFG_VERAISON_ATTESTATION_PTA_TEST_KEY embeds a test key.
1276 # Note: CFG_VERAISON_ATTESTATION_PTA_TEST_KEY must be enabled for
1280 $(error "CFG_VERAISON_ATTESTATION_PTA_TEST_KEY must be enabled")
1283 # CFG_SEMIHOSTING_CONSOLE, when enabled, embeds a semihosting console driver.
1302 # CFG_FFA_CONSOLE, when enabled, embeds a FFA console driver. OP-TEE console
1307 # CFG_CONSOLE_RUNTIME_SET, when enabled, reduces the trace LOG_LEVEL to the
1313 # CFG_CORE_UNSAFE_MODEXP, when enabled, makes modular exponentiation on TEE
1320 # when enabled, makes MBedTLS library for TAs use 'unsafe' modular
1324 # CFG_DYN_CONFIG, when enabled, use dynamic memory allocation for translation
1337 # CFG_TA_LIBGCC, when enabled, links user mode TAs with libgcc. Linking