TA对CA的鉴权，编译选型配置

set(CC_OVERALL_FLAGS -pipe) 
set(CC_WARNING_FLAGS -Wall -Werror -Wextra -Wdate-time -Wfloat-equal -Wshadow -Wformat -Wformat=2 -Wstack-protector 
  -Wstrict-prototypes -Wswitch-default -Wconversion -Wcast-qual -Wvla -Wunused -Wundef 
  -Wframe-larger-than=2048) 
set(CC_LANNGUAGE_FLAGS -fsigned-char -std=c17 -nostdinc) 
set(CC_GENERATION_FLAGS -fno-common -fno-short-enums -fvisibility=hidden -funwind-tables 
  -ftrivial-auto-var-init=zero -enable-trivial-auto-var-init-zero-knowing-it-will-be-removed-from-clang 
  -munaligned-access -fmax-type-align=1 
  -flto -fsanitize=cfi -fno-sanitize-cfi-cross-dso -ffunction-sections -fdata-sections) 
set(CC_OPTIMIZATION_FLAGS -fno-strict-aliasing -fno-omit-frame-pointer) 
set(CC_SECURITY_FLAGS -fPIC -fstack-protector-strong --param ssp-buffer-size=4) 
set(CC_DEFINE_FLAGS -D_FORTIFY_SOURCE=2 -D__AARCH64EB__=0 -D_REDIR_TIME64=0 ${TEE_CONFIG_FLAGS}) 
if ("${TARGET_IS_ARM64}" STREQUAL y) 
list(APPEND CC_GENERATION_FLAGS --target=aarch64-linux-gnu) 
set(CC_MACHINE_DEPENDENT_FLAGS -march=armv8.5-a -mbranch-protection=bti) 
else() 
list(APPEND CC_GENERATION_FLAGS --target=arm-linux-gnu) 
set(CC_MACHINE_DEPENDENT_FLAGS -march=armv8-a -mfloat-abi=soft) 
endif() 
set(CC_ALL_OPTIONS ${CC_OPTIMIZATION_LEVEL} ${CC_OVERALL_FLAGS} ${CC_WARNING_FLAGS} ${CC_LANNGUAGE_FLAGS} 
${CC_GENERATION_FLAGS} ${CC_MACHINE_DEPENDENT_FLAGS} ${CC_OPTIMIZATION_FLAGS} ${CC_SECURITY_FLAGS} 
${CC_DEFINE_FLAGS}) 
 
set(iTrustee_SDK_PATH $ENV{TA_ROOT_DIR}/itrustee_sdk) 
 
# public link flags 
if ("${TARGET_IS_ARM64}" STREQUAL y) 
set(TA_LINK ${iTrustee_SDK_PATH}/build/tools/ta_link_64.ld) 
else() 
set(TA_LINK ${iTrustee_SDK_PATH}/build/tools/ta_link_new.ld) 
endif() 
 
# link flag for module 
set(SHARED_LINKER_FLAGS -s "SHELL:-z text" "SHELL:-z relro" "SHELL:-z now" "SHELL:-z noexecstack" 
  -T ${TA_LINK} -shared -Bsymbolic --gc-sections) 
if ("${TARGET_IS_ARM64}" STREQUAL y) 
list(APPEND SHARED_LINKER_FLAGS "SHELL:-z max-page-size=4096" --execute-only) 
endif()