AM6 Firewall Descriptions¶
Introduction¶
This chapter provides information on firewalls that system firmware configures by default at boot time. Guide to read the tables in this chapter is provided below. For more details on firewalls refer to “Interconnect Firewalls” section of TRM and Firewall TISCI Description.
- Firewall ID: The firewall ID uniquely identifies each firewall
- Owner: Host ID that is owner of the firewall
- CBA_PERMISSION_x: Each firewall region/channel can have up to 3 slots for configuring permissions. Each permission slot takes the form of [user, permission], where user is a host and permission is a combination of r-read, w-write, c-cache, d-debug. The priv-id, secure/non-secure, user/privileged information are derived from the host id.
Note
In the below table, a firewall owned by RM implies that the corresponding resource is managed by the resource manager. Firewall configuration is internally handled by RM based on RM boardcfg.
List of Region Based Firewalls¶
| Firewall ID | Owner | Start Address | End Address | CBA_PERMISSION_0 | CBA_PERMISSION_1 | CBA_PERMISSION_2 |
|---|---|---|---|---|---|---|
| 11 | dmsc | 0x00300000 | 0x003000FF | dmsc,rwcd | ||
| 56 | dmsc | 0x00A00000 | 0x00A003FF | dmsc,rwcd | everyone,r | |
| 57 | dmsc | 0x00A10000 | 0x00A107FF | dmsc,rwcd | everyone,r | |
| 58 | dmsc | 0x00A20000 | 0x00A207FF | dmsc,rwcd | everyone,r | |
| 59 | dmsc | 0x00A30000 | 0x00A303FF | dmsc,rwcd | everyone,r | |
| 168 | dmsc | 0x42200000 | 0x422001FF | dmsc,rwcd | everyone,r | |
| 513 | dmsc | dmsc,rwcd | ||||
| 514 | dmsc | dmsc,rwcd | ||||
| 515 | dmsc | dmsc,rwcd | ||||
| 582 | dmsc | 0x44234000 | 0x44234FFF | everyone,r | everyone,r | everyone,r |
| 582 | dmsc | 0x44235000 | 0x44237FFF | dmsc,rwcd | dmsc,rwcd | dmsc,rwcd |
| 639 | dmsc | 0x45000000 | 0x45FFFFFF | dmsc,rwd | ||
| 639 | dmsc | 0x45D00000 | 0x45DFFFFF | dmsc,rwd | everyone,rwcd | everyone,rwcd |
| 1050 | none | 0x41C00000 | 0x41C7FFFF | everyone,rwcd | everyone,rwcd | everyone,rwcd |
| 1208 | dmsc | 0x40C00000 | 0x40C000FF | dmsc,rwcd | ||
| 1280 | none | 0x00000000 | 0xFFFFFFFFFFF | everyone,rwcd | everyone,rwcd | everyone,rwcd |
| 2048 | none | 0x00000000 | 0xFFFFFFFFFFF | everyone,rwcd | everyone,rwcd | everyone,rwcd |
| 2384 | dmsc | 0x00000000 | 0xFFFFFFFFFFF | dmsc,rwcd | ||
| 4136 | dmsc | 0x30800000 | 0x3080001F | dmsc,rwcd | everyone,r | everyone,r |
| 4136 | dmsc | 0x30900000 | 0x30901FFF | dmsc,rwcd | everyone,r | everyone,r |
| 4136 | dmsc | 0x33C00000 | 0x33C3FFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 4144 | dmsc | 0x30801000 | 0x3080101F | dmsc,rwcd | everyone,r | everyone,r |
| 4144 | dmsc | 0x30908000 | 0x30909FFF | dmsc,rwcd | everyone,r | everyone,r |
| 4144 | dmsc | 0x33C40000 | 0x33C7FFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 4152 | dmsc | 0x31120000 | 0x311200FF | dmsc,rwcd | everyone,r | everyone,r |
| 4152 | dmsc | 0x31130000 | 0x31133FFF | dmsc,rwcd | everyone,r | everyone,r |
| 4152 | dmsc | 0x33400000 | 0x3343FFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 4168 | dmsc | 0x31140000 | 0x328FFFFF | dmsc,rwcd | everyone,r | |
| 4288 | dmsc | 0x31080000 | 0x310BFFFF | dmsc,rwcd | everyone,r | everyone,r |
| 4288 | dmsc | 0x31160000 | 0x311603FF | dmsc,rwcd | everyone,r | everyone,r |
| 4288 | dmsc | 0x32000000 | 0x3201FFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 4288 | dmsc | 0x3C000000 | 0x3C3FFFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 4352 | dmsc | 0x30802000 | 0x3080201F | dmsc,rwcd | everyone,r | everyone,r |
| 4352 | dmsc | 0x30940000 | 0x3094FFFF | dmsc,rwcd | everyone,r | everyone,r |
| 4352 | dmsc | 0x31040000 | 0x31043FFF | dmsc,rwcd | everyone,r | everyone,r |
| 4352 | dmsc | 0x31100000 | 0x3110007F | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 4352 | dmsc | 0x31110000 | 0x31113FFF | dmsc,rwcd | everyone,r | everyone,r |
| 4352 | dmsc | 0x33800000 | 0x339FFFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 4352 | dmsc | 0x33D00000 | 0x33DFFFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 4384 | dmsc | 0x30B00000 | 0x30B0FFFF | dmsc,rwcd | everyone,r | everyone,r |
| 4384 | dmsc | 0x30C00000 | 0x30C0FFFF | dmsc,rwcd | everyone,r | everyone,r |
| 4384 | dmsc | 0x30D00000 | 0x30D07FFF | dmsc,rwcd | everyone,r | everyone,r |
| 4384 | dmsc | 0x31150000 | 0x311500FF | dmsc,rwcd | everyone,r | everyone,r |
| 4384 | dmsc | 0x34000000 | 0x340FFFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 4384 | dmsc | 0x35000000 | 0x350FFFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 4388 | dmsc | 0x31F78000 | 0x31F781FF | dmsc,rwcd | everyone,r | |
| 4396 | dmsc | 0x33000000 | 0x3303FFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 4408 | dmsc | everyone,rwcd | ||||
| 4448 | dmsc | 0x38000000 | 0x383FFFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 4449 | none | 0x70000000 | 0x701FFFFF | everyone,rwcd | everyone,rwcd | everyone,rwcd |
| 4449 | dmsc | 0x60000000 | 0x6CFFFFFF | dmsc,rwcd | everyone,r | |
| 4449 | none | 0x6D000000 | 0x6DFFFFFF | everyone,rwcd | everyone,rwcd | everyone,rwcd |
| 4449 | dmsc | 0x6E000000 | 0x6EFFFFFF | dmsc,rwcd | everyone,r | |
| 4449 | dmsc | sproxy_private,rwcd | ||||
| 6148 | dmsc | 0x28590000 | 0x285900FF | dmsc,rwcd | everyone,r | everyone,r |
| 6148 | dmsc | 0x285A0000 | 0x285A3FFF | dmsc,rwcd | everyone,r | everyone,r |
| 6148 | dmsc | 0x2A580000 | 0x2A5BFFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 6156 | dmsc | 0x285B0000 | 0x2A47FFFF | dmsc,rwcd | everyone,r | everyone,r |
| 6176 | dmsc | 0x28440000 | 0x2847FFFF | dmsc,rwcd | everyone,r | everyone,r |
| 6176 | dmsc | 0x285D0000 | 0x285D03FF | dmsc,rwcd | everyone,r | everyone,r |
| 6176 | dmsc | 0x2A280000 | 0x2A29FFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 6176 | dmsc | 0x2B800000 | 0x2BBFFFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 6240 | dmsc | 0x283C0000 | 0x283C001F | dmsc,rwcd | everyone,r | everyone,r |
| 6240 | dmsc | 0x28480000 | 0x28481FFF | dmsc,rwcd | everyone,r | everyone,r |
| 6240 | dmsc | 0x28560000 | 0x28563FFF | dmsc,rwcd | everyone,r | everyone,r |
| 6240 | dmsc | 0x28570000 | 0x2857007F | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 6240 | dmsc | 0x28580000 | 0x28580FFF | dmsc,rwcd | everyone,r | everyone,r |
| 6240 | dmsc | 0x2A600000 | 0x2A6FFFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 6240 | dmsc | 0x2A700000 | 0x2A7FFFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 6248 | dmsc | 0x28400000 | 0x28401FFF | dmsc,rwcd | everyone,r | everyone,r |
| 6248 | dmsc | 0x284A0000 | 0x284A3FFF | dmsc,rwcd | everyone,r | everyone,r |
| 6248 | dmsc | 0x284C0000 | 0x284C3FFF | dmsc,rwcd | everyone,r | everyone,r |
| 6248 | dmsc | 0x285C0000 | 0x285C00FF | dmsc,rwcd | everyone,r | everyone,r |
| 6248 | dmsc | 0x2A800000 | 0x2A83FFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 6248 | dmsc | 0x2AA00000 | 0x2AA3FFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 6252 | dmsc | 0x2A268000 | 0x2A2681FF | dmsc,rwcd | everyone,r | |
| 6260 | dmsc | 0x2A500000 | 0x2A53FFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
| 6268 | dmsc | everyone,rwcd | ||||
| 6269 | dmsc | sproxy_private,rwcd | ||||
| 6288 | dmsc | 0x2B000000 | 0x2B3FFFFF | dmsc,rwcd | everyone,rwcd | everyone,rwcd |
List of Channelized Firewalls¶
| Firewall ID | Owner | Start Channel | End Channel | CBA_PERMISSION_0 | CBA_PERMISSION_1 | CBA_PERMISSION_2 |
|---|---|---|---|---|---|---|
| 4132 | rm | 0 | 0 | block_everyone,r | ||
| 4140 | rm | 0 | 0 | block_everyone,r | ||
| 4148 | dmsc | 0 | 0 | dmsc,rwcd | ||
| 4160 | dmsc | 0 | 159 | dmsc,rwcd | everyone,r | |
| 4256 | dmsc | 0 | 0 | dmsc,rwcd | ||
| 4256 | dmsc | 152 | 152 | dmsc,rwcd | ||
| 4256 | dmsc | 302 | 303 | dmsc,rwcd | ||
| 4256 | dmsc | 768 | 817 | sproxy_private,rwcd | ||
| 4320 | rm | 0 | 0 | block_everyone,r | ||
| 4320 | rm | 256 | 256 | block_everyone,r | ||
| 4368 | dmsc | 0 | 0 | dmsc,rwcd | ||
| 4368 | rm | 1 | 151 | dmsc,r | ||
| 4368 | dmsc | 152 | 153 | dmsc,rwcd | ||
| 4368 | rm | 154 | 301 | dmsc,r | ||
| 4392 | dmsc | 0 | 0 | dmsc,rwcd | ||
| 4400 | dmsc | 0 | 9 | a53_secure_supervisor,rwcd | ||
| 4400 | dmsc | 10 | 39 | a53_non_secure_supervisor,rwcd | ||
| 4400 | dmsc | 40 | 54 | icssg,rwcd | ||
| 4400 | dmsc | 55 | 64 | gpu_0,rwcd | ||
| 4400 | dmsc | 128 | 159 | dmsc,rwcd | ||
| 4416 | dmsc | 0 | 0 | dmsc,rwcd | ||
| 4416 | dmsc | 152 | 152 | dmsc,rwcd | ||
| 4416 | dmsc | 302 | 303 | dmsc,rwcd | ||
| 4416 | dmsc | 768 | 817 | sproxy_private,rwcd | ||
| 6146 | rm | 0 | 0 | block_everyone,r | ||
| 6152 | dmsc | 0 | 4 | dmsc,rwcd | everyone,r | |
| 6152 | dmsc | 5 | 5 | everyone,r | dmsc,rwcd | |
| 6152 | dmsc | 6 | 89 | dmsc,rwcd | everyone,r | |
| 6160 | rm | 0 | 0 | block_everyone,r | ||
| 6160 | rm | 286 | 286 | block_everyone,r | ||
| 6208 | rm | 0 | 0 | block_everyone,r | ||
| 6208 | rm | 256 | 256 | block_everyone,r | ||
| 6244 | rm | 0 | 0 | block_everyone,r | ||
| 6244 | rm | 1 | 47 | dmsc,r | ||
| 6244 | rm | 48 | 48 | block_everyone,r | ||
| 6244 | rm | 49 | 95 | dmsc,r | ||
| 6256 | rm | 0 | 0 | block_everyone,r | ||
| 6264 | dmsc | 0 | 9 | pulsar_0,rwcd | ||
| 6264 | dmsc | 10 | 19 | pulsar_1,rwcd | ||
| 6264 | dmsc | 76 | 89 | dmsc,rwcd | ||
| 6272 | dmsc | 256 | 285 | sproxy_private,rwcd |
List of priv-ids¶
| Master name | priv-id | secure | non-secure | privileged | user | HOST-IDs |
|---|---|---|---|---|---|---|
| a53_non_secure_supervisor | 1 | False | True | True | False | 12,13,14,15,16,17 |
| a53_secure_supervisor | 1 | True | False | True | False | 10,11 |
| sproxy_private | 11 | True | True | True | True | N/A |
| pulsar_0 | 96 | True | True | True | False | 3,4 |
| pulsar_1 | 97 | True | True | True | False | 5,6 |
| icssg | 136 | False | True | True | True | 50,51,52 |
| gpu_0 | 184 | False | True | True | True | 30,31 |
| everyone | 195 | True | True | True | True | N/A |
| block_everyone | 197 | True | True | True | True | N/A |
| dmsc | 202 | False | True | True | True | N/A |