CHERIoT-Platform/network-stack

Put the device MAC address into a pre-shared read-only variable in the firewall

Open

#52 opened on Nov 19, 2024

View on GitHub
 (0 comments) (1 reaction) (0 assignees)C++ (14 forks)auto 404
good first issue

Repository metrics

Stars
 (10 stars)
PR merge metrics
 (PR metrics pending)

Description

Currently the device MAC is generated and stored in the firewall, and accessible by other compartments through firewall_mac_address_get.

A downside of having to retrieve a copy through firewall_mac_address_get is that the resulting copy increases the state of compartments, and is yet another thing that must be reset if a compartment crashes ("reset critical"). See the discussion in https://github.com/CHERIoT-Platform/network-stack/pull/50.

Instead, it would be desirable to put the device MAC address into a pre-shared read-only variable in the firewall.

Contributor guide