riscv-non-isa/riscv-ap-tee

[Qualcomm feedback] Chapter 4: Clarification on multiple supervisor domains

rsahita opened this issue · 1 comments

Reference: link

More than one confidential supervisor domains may be hosted by the TSM-driver. Similarly, more
than one TVMs may be hosted by the host OS/VMM via confidential supervisor domains.
Each TVM
may consist of the guest firmware, a guest OS and applications. The software components included
in the TVM are implementation specific.

It is not clear what differentiates a confidential supervisor domain from the regular supervisor domain from the perspective of the isolation mechanisms (isa and non-isa). Is this distinction only attained for a specific SW implementation and services and flows provided? sounds like it but just want to understand if there is any subtlety