AM6 Firewall Descriptions¶
Introduction¶
This chapter provides information on firewalls that system firmware configures by default at boot time. Guide to read the tables in this chapter is provided below. For more details on firewalls refer to “Interconnect Firewalls” section of TRM and Firewall TISCI Description.
- Firewall ID: The firewall ID uniquely identifies each firewall
- Owner: Host ID that is owner of the firewall
- CBA_PERMISSION_x: Each firewall region/channel can have up to 3 slots for configuring permissions. Each permission slot takes the form of [user, permission], where user is a host and permission is a combination of r-read, w-write, c-cache, d-debug. The priv-id, secure/non-secure, user/privileged information are derived from the host id.
Note
In the below table, a firewall owned by RM implies that the corresponding resource is managed by the resource manager. Firewall configuration is internally handled by RM based on RM boardcfg.
List of Region Based Firewalls¶
| Firewall ID | Owner | Start Address | End Address | CBA_PERMISSION_0 | CBA_PERMISSION_1 | CBA_PERMISSION_2 |
|---|---|---|---|---|---|---|
| 11 | dmsc | 0x00300000 | 0x003000FF | dmsc,rwcd | ||
| 513 | dmsc | dmsc,rwcd | ||||
| 514 | dmsc | dmsc,rwcd | ||||
| 515 | dmsc | dmsc,rwcd | ||||
| 582 | dmsc | 0x44234000 | 0x44234FFF | everyone,r | everyone,r | everyone,r |
| 582 | dmsc | 0x44235000 | 0x44237FFF | dmsc,rwcd | dmsc,rwcd | dmsc,rwcd |
| 639 | dmsc | 0x45000000 | 0x45FFFFFF | dmsc,rwd | ||
| 1208 | dmsc | 0x40C00000 | 0x40C000FF | dmsc,rwcd | ||
| 1280 | none | 0x00000000 | 0xFFFFFFFFFFF | everyone,rwcd | everyone,rwcd | everyone,rwcd |
| 2048 | none | 0x00000000 | 0xFFFFFFFFFFF | everyone,rwcd | everyone,rwcd | everyone,rwcd |
| 4136 | dmsc | 0x30800000 | 0x3080001F | dmsc,rwcd | everyone,r | everyone,r |
| 4136 | dmsc | 0x30900000 | 0x30907FFF | dmsc,rwcd | everyone,r | everyone,r |
| 4136 | dmsc | 0x33C00000 | 0x33C3FFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 4144 | dmsc | 0x30801000 | 0x3080101F | dmsc,rwcd | everyone,r | everyone,r |
| 4144 | dmsc | 0x30908000 | 0x3090FFFF | dmsc,rwcd | everyone,r | everyone,r |
| 4144 | dmsc | 0x33C40000 | 0x33C7FFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 4152 | dmsc | 0x31120000 | 0x311200FF | dmsc,rwcd | everyone,r | everyone,r |
| 4152 | dmsc | 0x33400000 | 0x3343FFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 4152 | dmsc | 0x31130000 | 0x31133FFF | dmsc,rwcd | everyone,r | everyone,r |
| 4168 | dmsc | 0x31140000 | 0x328FFFFF | dmsc,rwcd | everyone,r | |
| 4288 | dmsc | 0x31160000 | 0x311603FF | dmsc,rwcd | everyone,r | everyone,r |
| 4288 | dmsc | 0x31080000 | 0x310BFFFF | dmsc,rwcd | everyone,r | everyone,r |
| 4288 | dmsc | 0x3C000000 | 0x3C3FFFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 4288 | dmsc | 0x32000000 | 0x3201FFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 4352 | dmsc | 0x30802000 | 0x3080201F | dmsc,rwcd | everyone,r | everyone,r |
| 4352 | dmsc | 0x30940000 | 0x3097FFFF | dmsc,rwcd | everyone,r | everyone,r |
| 4352 | dmsc | 0x33D00000 | 0x33DFFFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 4352 | dmsc | 0x31100000 | 0x3110007F | dmsc,rwcd | everyone,r | everyone,r |
| 4352 | dmsc | 0x31110000 | 0x31113FFF | dmsc,rwcd | everyone,r | everyone,r |
| 4352 | dmsc | 0x31040000 | 0x31043FFF | dmsc,rwcd | everyone,r | everyone,r |
| 4352 | dmsc | 0x33800000 | 0x339FFFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 4384 | dmsc | 0x31150000 | 0x311500FF | dmsc,rwcd | everyone,r | everyone,r |
| 4384 | dmsc | 0x30D00000 | 0x30D07FFF | dmsc,rwcd | everyone,r | everyone,r |
| 4384 | dmsc | 0x30B00000 | 0x30B0FFFF | dmsc,rwcd | everyone,r | everyone,r |
| 4384 | dmsc | 0x30C00000 | 0x30C0FFFF | dmsc,rwcd | everyone,r | everyone,r |
| 4384 | dmsc | 0x35000000 | 0x350FFFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 4384 | dmsc | 0x34000000 | 0x340FFFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 4396 | dmsc | 0x33000000 | 0x3303FFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 4408 | dmsc | everyone,rwcd | ||||
| 4448 | dmsc | 0x38000000 | 0x383FFFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 4449 | none | 0x70000000 | 0x701FFFFF | everyone,rwcd | everyone,rwcd | everyone,rwcd |
| 4449 | dmsc | 0x60000000 | 0x6CFFFFFF | dmsc,rwcd | everyone,r | |
| 4449 | none | 0x6D000000 | 0x6DFFFFFF | everyone,rwcd | everyone,rwcd | everyone,rwcd |
| 4449 | dmsc | 0x6E000000 | 0x6EFFFFFF | dmsc,rwcd | everyone,r | |
| 4449 | dmsc | sproxy_private,rwcd | ||||
| 6148 | dmsc | 0x28590000 | 0x285900FF | dmsc,rwcd | everyone,r | everyone,r |
| 6148 | dmsc | 0x2A580000 | 0x2A5BFFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 6148 | dmsc | 0x285A0000 | 0x285A3FFF | dmsc,rwcd | everyone,r | everyone,r |
| 6156 | dmsc | 0x285B0000 | 0x2A47FFFF | dmsc,rwcd | everyone,r | everyone,r |
| 6176 | dmsc | 0x285D0000 | 0x285D03FF | dmsc,rwcd | everyone,r | everyone,r |
| 6176 | dmsc | 0x28440000 | 0x2847FFFF | dmsc,rwcd | everyone,r | everyone,r |
| 6176 | dmsc | 0x2B800000 | 0x2BBFFFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 6176 | dmsc | 0x2A280000 | 0x2A29FFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 6240 | dmsc | 0x283C0000 | 0x283C001F | dmsc,rwcd | everyone,r | everyone,r |
| 6240 | dmsc | 0x28560000 | 0x2856FFFF | dmsc,rwcd | everyone,r | everyone,r |
| 6240 | dmsc | 0x2A700000 | 0x2A7FFFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 6240 | dmsc | 0x28570000 | 0x2857007F | dmsc,rwcd | everyone,r | everyone,r |
| 6240 | dmsc | 0x28580000 | 0x28580FFF | dmsc,rwcd | everyone,r | everyone,r |
| 6240 | dmsc | 0x28480000 | 0x28481FFF | dmsc,rwcd | everyone,r | everyone,r |
| 6240 | dmsc | 0x2A600000 | 0x2A6FFFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 6248 | dmsc | 0x285C0000 | 0x285C00FF | dmsc,rwcd | everyone,r | everyone,r |
| 6248 | dmsc | 0x28400000 | 0x28401FFF | dmsc,rwcd | everyone,r | everyone,r |
| 6248 | dmsc | 0x284A0000 | 0x284A3FFF | dmsc,rwcd | everyone,r | everyone,r |
| 6248 | dmsc | 0x284C0000 | 0x284C3FFF | dmsc,rwcd | everyone,r | everyone,r |
| 6248 | dmsc | 0x2AA00000 | 0x2AA3FFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 6248 | dmsc | 0x2A800000 | 0x2A83FFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 6260 | dmsc | 0x2A500000 | 0x2A53FFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 6268 | dmsc | everyone,rwcd | ||||
| 6269 | dmsc | sproxy_private,rwcd | ||||
| 6288 | dmsc | 0x2B000000 | 0x2B3FFFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
List of Channelized Firewalls¶
| Firewall ID | Owner | Start Channel | End Channel | CBA_PERMISSION_0 | CBA_PERMISSION_1 | CBA_PERMISSION_2 |
|---|---|---|---|---|---|---|
| 4132 | rm | 0 | 0 | block_everyone,r | ||
| 4140 | rm | 0 | 0 | block_everyone,r | ||
| 4148 | dmsc | 0 | 0 | dmsc,rwcd | ||
| 4160 | dmsc | 0 | 159 | dmsc,rwcd | everyone,r | |
| 4256 | dmsc | 0 | 0 | dmsc,rwcd | ||
| 4256 | dmsc | 152 | 152 | dmsc,rwcd | ||
| 4256 | dmsc | 302 | 303 | dmsc,rwcd | ||
| 4256 | dmsc | 768 | 817 | sproxy_private,rwcd | ||
| 4320 | rm | 0 | 0 | block_everyone,r | ||
| 4320 | rm | 256 | 256 | block_everyone,r | ||
| 4368 | dmsc | 0 | 0 | dmsc,rwcd | ||
| 4368 | rm | 1 | 151 | dmsc,r | ||
| 4368 | dmsc | 152 | 153 | dmsc,rwcd | ||
| 4368 | rm | 154 | 301 | dmsc,r | ||
| 4392 | dmsc | 0 | 0 | dmsc,rwcd | ||
| 4400 | dmsc | 0 | 9 | a53_secure_supervisor,rwcd | ||
| 4400 | dmsc | 10 | 39 | a53_non_secure_supervisor,rwcd | ||
| 4400 | dmsc | 40 | 54 | icssg,rwcd | ||
| 4400 | dmsc | 55 | 64 | gpu_0,rwcd | ||
| 4400 | dmsc | 128 | 159 | dmsc,rwcd | ||
| 4416 | dmsc | 0 | 0 | dmsc,rwcd | ||
| 4416 | dmsc | 152 | 152 | dmsc,rwcd | ||
| 4416 | dmsc | 302 | 303 | dmsc,rwcd | ||
| 4416 | dmsc | 768 | 817 | sproxy_private,rwcd | ||
| 6146 | rm | 0 | 0 | block_everyone,r | ||
| 6152 | dmsc | 5 | 5 | everyone,r | dmsc,rwcd | |
| 6152 | dmsc | 0 | 4 | dmsc,rwcd | everyone,r | |
| 6152 | dmsc | 6 | 89 | dmsc,rwcd | everyone,r | |
| 6160 | rm | 0 | 0 | block_everyone,r | ||
| 6160 | rm | 286 | 286 | block_everyone,r | ||
| 6208 | rm | 0 | 0 | block_everyone,r | ||
| 6208 | rm | 256 | 256 | block_everyone,r | ||
| 6244 | rm | 0 | 0 | block_everyone,r | ||
| 6244 | rm | 1 | 47 | dmsc,r | ||
| 6244 | rm | 48 | 48 | block_everyone,r | ||
| 6244 | rm | 49 | 95 | dmsc,r | ||
| 6256 | rm | 0 | 0 | block_everyone,r | ||
| 6264 | dmsc | 0 | 9 | pulsar_0,rwcd | ||
| 6264 | dmsc | 10 | 19 | pulsar_1,rwcd | ||
| 6264 | dmsc | 76 | 89 | dmsc,rwcd | ||
| 6272 | dmsc | 256 | 285 | sproxy_private,rwcd |
List of priv-ids¶
| Master name | priv-id | secure | non-secure | privileged | user | HOST-IDs |
|---|---|---|---|---|---|---|
| a53_non_secure_supervisor | 1 | False | True | True | False | 12,13,14,15,16,17 |
| a53_secure_supervisor | 1 | True | False | True | False | 10,11 |
| sproxy_private | 11 | True | True | True | True | N/A |
| pulsar_0 | 96 | True | True | True | False | 3,4 |
| pulsar_1 | 97 | True | True | True | False | 5,6 |
| icssg | 136 | False | True | True | True | 50,51,52 |
| gpu_0 | 184 | False | True | True | True | 30,31 |
| everyone | 195 | True | True | True | True | N/A |
| block_everyone | 197 | True | True | True | True | N/A |
| dmsc | 202 | False | True | True | True | N/A |