Add a pattern property to allow a device to request an alternate
access rights configuration to one or more firewall controllers.
It allows run-time controller reconfiguration of access rights
to an authorized entity as use in OP-TEE OS [1].

Signed-off-by: Gatien Chevallier <gatien.chevallier@foss.st.com>
Link: https://github.com/OP-TEE/optee_os/pull/6946 [1]
---
Changes in V2:
	- Addition of #access-conf-cells property
---
 .../access-controllers/access-controllers.yaml     | 31 ++++++++++++++++++++++
 1 file changed, 31 insertions(+)

diff --git a/Documentation/devicetree/bindings/access-controllers/access-controllers.yaml b/Documentation/devicetree/bindings/access-controllers/access-controllers.yaml
index 99e2865f0e46a0600ebbba3bc5771dc63d578c8b..304eecc79db8ae98a0330b3ec186e29832fb8c87 100644
--- a/Documentation/devicetree/bindings/access-controllers/access-controllers.yaml
+++ b/Documentation/devicetree/bindings/access-controllers/access-controllers.yaml
@@ -45,6 +45,12 @@ properties:
       Can be any value as specified by device tree binding documentation
       of a particular provider. The node is an access controller.
 
+  "#access-conf-cells":
+    description:
+      Number of cells in an *(?<=)-access-conf$ specifier;
+      Can be any value as specified by device tree binding documentation
+      of a particular provider. The node is an access controller.
+
   access-controller-names:
     $ref: /schemas/types.yaml#/definitions/string-array
     description:
@@ -58,6 +64,16 @@ properties:
       A list of access controller specifiers, as defined by the
       bindings of the access-controllers provider.
 
+patternProperties:
+  ".*(?<=)-access-conf$":
+    $ref: /schemas/types.yaml#/definitions/phandle-array
+    description:
+      An access controller configuration contains a list of inseparable entries.
+      A configuration may reference multiple access controllers. Therefore, each
+      entry content may vary accordingly to the access controller
+      "#access-conf-cells" value. A consumer will use this property to be able
+      to dynamically query for an access rights update.
+
 additionalProperties: true
 
 examples:
@@ -65,6 +81,7 @@ examples:
     clock_controller: access-controllers@50000 {
         reg = <0x50000 0x400>;
         #access-controller-cells = <2>;
+        #access-conf-cells = <2>;
     };
 
     bus_controller: bus@60000 {
@@ -73,6 +90,7 @@ examples:
         #size-cells = <1>;
         ranges;
         #access-controller-cells = <3>;
+        #access-conf-cells = <2>;
 
         uart4: serial@60100 {
             reg = <0x60100 0x400>;
@@ -81,4 +99,17 @@ examples:
                                  <&bus_controller 1 3 5>;
             access-controller-names = "clock", "bus";
         };
+
+        uart5: serial@60200 {
+          reg = <0x60200 0x400>;
+          clocks = <&clk_serial2>;
+          access-controllers = <&bus_controller 0 0 0>, <&bus_controller 1 0 0>,
+                               <&clock_controller 2 3>;
+          default-access-conf = <&bus_controller 0 10>,
+                                <&bus_controller 1 10>,
+                                <&clock_controller 0 0>;
+          shared-access-conf = <&bus_controller 0 256>,
+                               <&bus_controller 1 256>,
+                               <&clock_controller 0 256>;
+        };
     };

---
base-commit: 42f7652d3eb527d03665b09edac47f85fb600924
change-id: 20241025-firewall-conf-v2-c7074b3019bf

Best regards,
-- 
Gatien Chevallier <gatien.chevallier@foss.st.com>