HW/SW Boundary

Purpose

Review the hardware/software security interface to verify that hardware security features are correctly enabled by software, IOMMU/SMMU provides adequate DMA protection, and the HW/SW trust model is coherent and complete.

Scope Constraints

Reads kernel configuration, firmware settings, device trees, and hardware documentation. Does not modify kernel configuration or firmware. Does not execute commands on production systems.

Inputs

• Hardware platform specification (CPU features, IOMMU/SMMU, security extensions)
• Kernel/firmware configuration for hardware security features
• Device tree or ACPI tables defining hardware topology
• DMA-capable devices and their trust classification
• Boot chain architecture (ROM → bootloader → kernel)

Input Sanitization

No user-provided values are used in commands or file paths. All inputs are treated as read-only analysis targets.