J721E Firewall Descriptions¶
Introduction¶
This chapter provides information on firewalls that system firmware configures by default at boot time. Guide to read the tables in this chapter is provided below. For more details on firewalls refer to “Interconnect Firewalls” section of TRM and Firewall TISCI Description.
- Firewall ID: The firewall ID uniquely identifies each firewall
- Owner: Host ID that is owner of the firewall
- CBA_PERMISSION_x: Each firewall region/channel can have up to 3 slots for configuring permissions. Each permission slot takes the form of [user, permission], where user is a host and permission is a combination of r-read, w-write, c-cache, d-debug. The priv-id, secure/non-secure, user/privileged information are derived from the host id.
Note
In the below table, a firewall owned by RM implies that the corresponding resource is managed by the resource manager. Firewall configuration is internally handled by RM based on RM boardcfg.
List of Region Based Firewalls¶
| Firewall ID | Owner | Start Address | End Address | CBA_PERMISSION_0 | CBA_PERMISSION_1 | CBA_PERMISSION_2 |
|---|---|---|---|---|---|---|
| 513 | dmsc | dmsc,rwcd | ||||
| 514 | dmsc | dmsc,rwcd | ||||
| 515 | dmsc | dmsc,rwcd | ||||
| 582 | dmsc | 0x44234000 | 0x44234FFF | everyone,r | everyone,r | everyone,r |
| 582 | dmsc | 0x44235000 | 0x44237FFF | dmsc,rwcd | dmsc,rwcd | dmsc,rwcd |
| 639 | dmsc | 0x45000000 | 0x45FFFFFF | dmsc,rwd | ||
| 639 | dmsc | 0x45D00000 | 0x45DFFFFF | dmsc,rwd | everyone,rwcd | everyone,rwcd |
| 1050 | none | 0x41C00000 | 0x41CFFFFF | everyone,rwcd | everyone,rwcd | everyone,rwcd |
| 1280 | none | 0x00000000 | 0xFFFFFFFFFFF | everyone,rwcd | everyone,rwcd | everyone,rwcd |
| 2312 | none | 0x00000000 | 0xFFFFFFFFFFF | everyone,rwcd | everyone,rwcd | everyone,rwcd |
| 4160 | dmsc | 0x38000000 | 0x383FFFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 4288 | dmsc | 0x31080000 | 0x310BFFFF | dmsc,rwcd | everyone,r | everyone,r |
| 4288 | dmsc | 0x31160000 | 0x311603FF | dmsc,rwcd | everyone,r | everyone,r |
| 4288 | dmsc | 0x32000000 | 0x3201FFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 4288 | dmsc | 0x3C000000 | 0x3C3FFFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 4352 | dmsc | 0x30802000 | 0x3080201F | dmsc,rwcd | everyone,r | everyone,r |
| 4352 | dmsc | 0x30940000 | 0x3097FFFF | dmsc,rwcd | everyone,r | everyone,r |
| 4352 | dmsc | 0x31040000 | 0x31043FFF | dmsc,rwcd | everyone,r | everyone,r |
| 4352 | dmsc | 0x31100000 | 0x31100FFF | dmsc,rwcd | everyone,r | everyone,r |
| 4352 | dmsc | 0x31110000 | 0x31113FFF | dmsc,rwcd | everyone,r | everyone,r |
| 4352 | dmsc | 0x33800000 | 0x339FFFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 4352 | dmsc | 0x33D00000 | 0x33DFFFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 4384 | dmsc | 0x30B00000 | 0x30B1FFFF | dmsc,rwcd | everyone,r | everyone,r |
| 4384 | dmsc | 0x30C00000 | 0x30C0FFFF | dmsc,rwcd | everyone,r | everyone,r |
| 4384 | dmsc | 0x30D00000 | 0x30D07FFF | dmsc,rwcd | everyone,r | everyone,r |
| 4384 | dmsc | 0x31150000 | 0x311500FF | dmsc,rwcd | everyone,r | everyone,r |
| 4384 | dmsc | 0x34000000 | 0x340FFFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 4384 | dmsc | 0x35000000 | 0x351FFFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 4648 | dmsc | 0x30800000 | 0x3080001F | dmsc,rwcd | everyone,r | everyone,r |
| 4648 | dmsc | 0x30900000 | 0x30907FFF | dmsc,rwcd | everyone,r | everyone,r |
| 4648 | dmsc | 0x33C00000 | 0x33C3FFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 4656 | dmsc | 0x30801000 | 0x3080101F | dmsc,rwcd | everyone,r | everyone,r |
| 4656 | dmsc | 0x30908000 | 0x3090FFFF | dmsc,rwcd | everyone,r | everyone,r |
| 4656 | dmsc | 0x33C40000 | 0x33C7FFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 4664 | dmsc | 0x31120000 | 0x311200FF | dmsc,rwcd | everyone,r | everyone,r |
| 4664 | dmsc | 0x31130000 | 0x31133FFF | dmsc,rwcd | everyone,r | everyone,r |
| 4664 | dmsc | 0x33400000 | 0x3343FFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 4680 | dmsc | 0x31140000 | 0x328FFFFF | dmsc,rwcd | everyone,r | |
| 4688 | dmsc | 0x33000000 | 0x3303FFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 4704 | dmsc | everyone,rwcd | ||||
| 4760 | none | 0x70000000 | 0x701FFFFF | everyone,rwcd | everyone,rwcd | everyone,rwcd |
| 4760 | dmsc | 0x60000000 | 0x6CFFFFFF | dmsc,rwcd | everyone,r | |
| 4760 | none | 0x6D000000 | 0x6DFFFFFF | everyone,rwcd | everyone,rwcd | everyone,rwcd |
| 4760 | dmsc | 0x6E000000 | 0x6EFFFFFF | dmsc,rwcd | everyone,r | |
| 4760 | dmsc | sproxy_private,rwcd | ||||
| 4761 | none | 0x70000000 | 0x701FFFFF | everyone,rwcd | everyone,rwcd | everyone,rwcd |
| 4761 | dmsc | 0x60000000 | 0x6CFFFFFF | dmsc,rwcd | everyone,r | |
| 4761 | none | 0x6D000000 | 0x6DFFFFFF | everyone,rwcd | everyone,rwcd | everyone,rwcd |
| 4761 | dmsc | 0x6E000000 | 0x6EFFFFFF | dmsc,rwcd | everyone,r | |
| 4761 | dmsc | sproxy_private,rwcd | ||||
| 6148 | dmsc | 0x28590000 | 0x285900FF | dmsc,rwcd | everyone,r | everyone,r |
| 6148 | dmsc | 0x285A0000 | 0x285A3FFF | dmsc,rwcd | everyone,r | everyone,r |
| 6148 | dmsc | 0x2A580000 | 0x2A5BFFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 6156 | dmsc | 0x285B0000 | 0x2A47FFFF | dmsc,rwcd | everyone,r | everyone,r |
| 6176 | dmsc | 0x28440000 | 0x2847FFFF | dmsc,rwcd | everyone,r | everyone,r |
| 6176 | dmsc | 0x285D0000 | 0x285D03FF | dmsc,rwcd | everyone,r | everyone,r |
| 6176 | dmsc | 0x2A280000 | 0x2A29FFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 6176 | dmsc | 0x2B800000 | 0x2BBFFFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 6240 | dmsc | 0x283C0000 | 0x283C001F | dmsc,rwcd | everyone,r | everyone,r |
| 6240 | dmsc | 0x28480000 | 0x28481FFF | dmsc,rwcd | everyone,r | everyone,r |
| 6240 | dmsc | 0x28560000 | 0x2856FFFF | dmsc,rwcd | everyone,r | everyone,r |
| 6240 | dmsc | 0x28570000 | 0x285701FF | dmsc,rwcd | everyone,r | everyone,r |
| 6240 | dmsc | 0x28580000 | 0x28580FFF | dmsc,rwcd | everyone,r | everyone,r |
| 6240 | dmsc | 0x2A600000 | 0x2A6FFFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 6240 | dmsc | 0x2A700000 | 0x2A7FFFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 6248 | dmsc | 0x28400000 | 0x28401FFF | dmsc,rwcd | everyone,r | everyone,r |
| 6248 | dmsc | 0x284A0000 | 0x284A3FFF | dmsc,rwcd | everyone,r | everyone,r |
| 6248 | dmsc | 0x284C0000 | 0x284C3FFF | dmsc,rwcd | everyone,r | everyone,r |
| 6248 | dmsc | 0x285C0000 | 0x285C00FF | dmsc,rwcd | everyone,r | everyone,r |
| 6248 | dmsc | 0x2A800000 | 0x2A83FFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 6248 | dmsc | 0x2AA00000 | 0x2AA3FFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 6260 | dmsc | 0x2A500000 | 0x2A53FFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 6268 | dmsc | everyone,rwcd | ||||
| 6269 | dmsc | sproxy_private,rwcd | ||||
| 6288 | dmsc | 0x2B000000 | 0x2B3FFFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
List of Channelized Firewalls¶
| Firewall ID | Owner | Start Channel | End Channel | CBA_PERMISSION_0 | CBA_PERMISSION_1 | CBA_PERMISSION_2 |
|---|---|---|---|---|---|---|
| 4128 | dmsc | 974 | 1023 | sproxy_private,rwcd | ||
| 4224 | dmsc | 974 | 1023 | sproxy_private,rwcd | ||
| 4320 | rm | 0 | 0 | block_everyone,r | ||
| 4320 | rm | 256 | 256 | block_everyone,r | ||
| 4368 | rm | 0 | 0 | block_everyone,r | ||
| 4368 | rm | 1 | 299 | dmsc,r | ||
| 4368 | rm | 300 | 300 | block_everyone,r | ||
| 4368 | rm | 301 | 439 | dmsc,r | ||
| 4644 | rm | 0 | 0 | block_everyone,r | ||
| 4652 | rm | 0 | 0 | block_everyone,r | ||
| 4660 | rm | 0 | 0 | block_everyone,r | ||
| 4672 | dmsc | 0 | 159 | dmsc,rwcd | everyone,r | |
| 4684 | rm | 0 | 0 | block_everyone,r | ||
| 4696 | dmsc | 0 | 9 | a72_secure_supervisor,rwcd | ||
| 4696 | dmsc | 10 | 24 | a72_non_secure_supervisor,rwcd | ||
| 4696 | dmsc | 25 | 29 | main_0_c7x_0_secure,rwcd | ||
| 4696 | dmsc | 30 | 34 | main_0_c7x_0_nonsecure,rwcd | ||
| 4696 | dmsc | 35 | 39 | main_0_c6x_0_secure,rwcd | ||
| 4696 | dmsc | 40 | 44 | main_0_c6x_0_nonsecure,rwcd | ||
| 4696 | dmsc | 45 | 49 | main_0_c6x_1_secure,rwcd | ||
| 4696 | dmsc | 50 | 54 | main_0_c6x_1_nonsecure,rwcd | ||
| 4696 | dmsc | 55 | 59 | gpu_0,rwcd | ||
| 4696 | dmsc | 60 | 64 | main_0_r5_0_nonsecure,rwcd | ||
| 4696 | dmsc | 65 | 69 | main_0_r5_0_secure,rwcd | ||
| 4696 | dmsc | 70 | 74 | main_0_r5_1_nonsecure,rwcd | ||
| 4696 | dmsc | 75 | 79 | main_0_r5_1_secure,rwcd | ||
| 4696 | dmsc | 80 | 84 | main_1_r5_0_nonsecure,rwcd | ||
| 4696 | dmsc | 85 | 89 | main_1_r5_0_secure,rwcd | ||
| 4696 | dmsc | 90 | 94 | main_1_r5_1_nonsecure,rwcd | ||
| 4696 | dmsc | 95 | 99 | main_1_r5_1_secure,rwcd | ||
| 4696 | dmsc | 100 | 104 | main_0_icssg_0,rwcd | ||
| 4696 | dmsc | 112 | 159 | dmsc,rwcd | ||
| 6146 | dmsc | 0 | 0 | dmsc,rwcd | ||
| 6152 | dmsc | 0 | 4 | dmsc,rwcd | everyone,r | |
| 6152 | dmsc | 5 | 5 | everyone,r | dmsc,rwcd | |
| 6152 | dmsc | 6 | 89 | dmsc,rwcd | everyone,r | |
| 6160 | rm | 4 | 4 | dmsc,rwcd | ||
| 6160 | dmsc | 46 | 47 | dmsc,rwcd | ||
| 6160 | rm | 52 | 53 | dmsc,rwcd | ||
| 6160 | dmsc | 93 | 95 | dmsc,rwcd | ||
| 6160 | rm | 100 | 101 | dmsc,rwcd | ||
| 6160 | dmsc | 252 | 255 | dmsc,rwcd | ||
| 6208 | rm | 0 | 0 | block_everyone,r | ||
| 6208 | rm | 256 | 256 | block_everyone,r | ||
| 6244 | rm | 0 | 3 | dmsc,r | ||
| 6244 | rm | 4 | 4 | dmsc,rwcd | ||
| 6244 | rm | 5 | 45 | dmsc,r | ||
| 6244 | dmsc | 46 | 47 | dmsc,rwcd | ||
| 6244 | rm | 48 | 51 | dmsc,r | ||
| 6244 | rm | 52 | 53 | dmsc,rwcd | ||
| 6244 | rm | 54 | 92 | dmsc,r | ||
| 6244 | dmsc | 93 | 95 | dmsc,rwcd | ||
| 6256 | dmsc | 0 | 0 | dmsc,rwcd | ||
| 6264 | dmsc | 0 | 9 | pulsar_0,rwcd | ||
| 6264 | dmsc | 10 | 19 | pulsar_1,rwcd | ||
| 6264 | dmsc | 76 | 89 | dmsc,rwcd | ||
| 6272 | rm | 4 | 4 | dmsc,rwcd | ||
| 6272 | dmsc | 46 | 47 | dmsc,rwcd | ||
| 6272 | rm | 52 | 53 | dmsc,rwcd | ||
| 6272 | dmsc | 93 | 95 | dmsc,rwcd | ||
| 6272 | rm | 100 | 101 | dmsc,rwcd | ||
| 6272 | dmsc | 252 | 255 | dmsc,rwcd | ||
| 6272 | dmsc | 256 | 285 | sproxy_private,rwcd |
List of priv-ids¶
| Master name | priv-id | secure | non-secure | privileged | user | HOST-IDs |
|---|---|---|---|---|---|---|
| a72_non_secure_supervisor | 1 | False | True | True | False | 12,13,14 |
| a72_secure_supervisor | 1 | True | False | True | False | 10,11 |
| sproxy_private | 11 | True | True | True | True | N/A |
| main_0_c7x_0_secure | 21 | True | False | True | True | 20 |
| main_0_c7x_0_nonsecure | 21 | False | True | True | True | 21 |
| pulsar_0 | 96 | True | True | True | False | 3,4 |
| pulsar_1 | 97 | True | True | True | False | 5,6 |
| main_0_icssg_0 | 136 | False | True | True | True | 50 |
| gpu_0 | 187 | False | True | True | True | 30 |
| everyone | 195 | True | True | True | True | N/A |
| block_everyone | 197 | True | True | True | True | N/A |
| dmsc | 202 | False | True | True | True | N/A |
| main_0_r5_0_nonsecure | 212 | False | True | True | True | 35 |
| main_0_r5_0_secure | 212 | True | False | True | True | 36 |
| main_0_r5_1_nonsecure | 213 | False | True | True | True | 37 |
| main_0_r5_1_secure | 213 | True | False | True | True | 38 |
| main_1_r5_0_nonsecure | 214 | False | True | True | True | 40 |
| main_1_r5_0_secure | 214 | True | False | True | True | 41 |
| main_1_r5_1_nonsecure | 215 | False | True | True | True | 42 |
| main_1_r5_1_secure | 215 | True | False | True | True | 43 |
| main_0_c6x_0_secure | 220 | True | False | True | True | 25 |
| main_0_c6x_0_nonsecure | 220 | False | True | True | True | 26 |
| main_0_c6x_1_secure | 221 | True | False | True | True | 27 |
| main_0_c6x_1_nonsecure | 221 | False | True | True | True | 28 |