-
Notifications
You must be signed in to change notification settings - Fork 78
feat: security: Add docs explaining Firewall Exceptions #620
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: master
Are you sure you want to change the base?
Conversation
8325a08 to
5282d6e
Compare
| @@ -0,0 +1,112 @@ | |||
| .. _firewall-exception: | |||
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
this newly added section doesn't seem to follow the guidelines for section headers - https://github.com/TexasInstruments/processor-sdk-doc/blob/master/CONTRIBUTING.md#headings--sections
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Addressed, @cshilwant
16ec695 to
8f122be
Compare
| .. _firewall-exception: | ||
|
|
||
| ################## | ||
| Firewall Exception |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
"Firewall Exception" heading looks a little odd, can we make it more easy to follow ? maybe "Firewall Exception Guide" or "Memory Firewalls"
| | | Trusted Execution Environment that enables isolated | :ref:`foundational-components-optee` | | ||
| | | execution of security-sensitive applications and services | | | ||
| +-------------------------+-----------------------------------------------------------+--------------------------------------+ | ||
| | **Firewall Exception** | Debugging hardware firewall violations | :ref:`firewall-exception` | |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
maybe we can call this feature as "Memory Firewalls" and description : "Prevents unauthorized memory access through hardware-enforced security boundaries"
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Done, addressed both comments @shiva-ti
Add a document to explain when a firewall exception occurs and how to trigger it on purpose, and how to interpret it. Signed-off-by: Suhaas Joshi <s-joshi@ti.com>
8f122be to
2c0c4cc
Compare
Add a document to explain when a firewall exception occurs and how to trigger it on purpose, and how to interpret it.