diff options
| author | Zelalem Aweke <zelalem.aweke@arm.com> | 2021-10-21 13:59:45 -0500 |
|---|---|---|
| committer | Zelalem Aweke <zelalem.aweke@arm.com> | 2021-11-15 22:20:07 +0100 |
| commit | 7446c266c91bc28c87fca634df57bdcf15b32a5b (patch) | |
| tree | 2f93fa3fdf57d2777a8b767da1f330c14118898a /docs/threat_model | |
| parent | 6ee92598cf540ac5746f8af714aa3601ea03ad3d (diff) | |
| download | arm-trusted-firmware-7446c266c91bc28c87fca634df57bdcf15b32a5b.tar.gz | |
docs(rme): add description of TF-A changes for RME
This patch expands the RME documentation with description of TF-A
changes for RME. It also modifies some other parts of TF-A documentation
to account for RME changes.
Signed-off-by: Zelalem Aweke <zelalem.aweke@arm.com>
Change-Id: I9e6feeee235f0ba4b767d239f15840f1e0c540bb
Diffstat (limited to 'docs/threat_model')
| -rw-r--r-- | docs/threat_model/threat_model.rst | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/docs/threat_model/threat_model.rst b/docs/threat_model/threat_model.rst index 9f26487e9..4a31e7988 100644 --- a/docs/threat_model/threat_model.rst +++ b/docs/threat_model/threat_model.rst @@ -6,6 +6,11 @@ Introduction ************************ This document provides a generic threat model for TF-A firmware. +.. note:: + + This threat model doesn't consider Root and Realm worlds introduced by + :ref:`Realm Management Extension (RME)`. + ************************ Target of Evaluation ************************ @@ -22,8 +27,10 @@ assumptions: - All TF-A images are run from either ROM or on-chip trusted SRAM. This means TF-A is not vulnerable to an attacker that can probe or tamper with off-chip memory. + - Trusted boot is enabled. This means an attacker can't boot arbitrary images that are not approved by platform providers. + - There is no Secure-EL2. We don't consider threats that may come with Secure-EL2 software. |