cpu_relax();
 }
 
+/*
+ * By default, we write directly to secure registers.  Platforms must
+ * override this if they are running non-secure.
+ */
+static void l2c_write_sec(unsigned long val, void __iomem *base, unsigned reg)
+{
+       if (val == readl_relaxed(base + reg))
+               return;
+       if (outer_cache.write_sec)
+               outer_cache.write_sec(val, reg);
+       else
+               writel_relaxed(val, base + reg);
+}
+
 /*
  * This should only be called when we have a requirement that the
  * register be written due to a work-around, as platforms running
  */
 static inline void l2c_set_debug(void __iomem *base, unsigned long val)
 {
-       outer_cache.set_debug(val);
+       if (outer_cache.set_debug)
+               outer_cache.set_debug(val);
+       else
+               l2c_write_sec(val, base, L2X0_DEBUG_CTRL);
 }
 
 static void __l2c_op_way(void __iomem *reg)
 {
        unsigned long flags;
 
-       /* Only write the aux register if it needs changing */
-       if (readl_relaxed(base + L2X0_AUX_CTRL) != aux)
-               writel_relaxed(aux, base + L2X0_AUX_CTRL);
+       l2c_write_sec(aux, base, L2X0_AUX_CTRL);
 
        l2c_unlock(base, num_lock);
 
        l2c_wait_mask(base + sync_reg_offset, 1);
        local_irq_restore(flags);
 
-       writel_relaxed(L2X0_CTRL_EN, base + L2X0_CTRL);
+       l2c_write_sec(L2X0_CTRL_EN, base, L2X0_CTRL);
 }
 
 static void l2c_disable(void)
        void __iomem *base = l2x0_base;
 
        outer_cache.flush_all();
-       writel_relaxed(0, base + L2X0_CTRL);
+       l2c_write_sec(0, base, L2X0_CTRL);
        dsb(st);
 }
 
 #if defined(CONFIG_PL310_ERRATA_588369) || defined(CONFIG_PL310_ERRATA_727915)
 static inline void debug_writel(unsigned long val)
 {
-       if (outer_cache.set_debug)
+       if (outer_cache.set_debug || outer_cache.write_sec)
                l2c_set_debug(l2x0_base, val);
 }
 #else
 
        raw_spin_lock_irqsave(&l2x0_lock, flags);
        __l2x0_flush_all();
-       writel_relaxed(0, l2x0_base + L2X0_CTRL);
+       l2c_write_sec(0, l2x0_base, L2X0_CTRL);
        dsb(st);
        raw_spin_unlock_irqrestore(&l2x0_lock, flags);
 }
                                L2X0_CACHE_ID_RTL_MASK;
 
                if (revision >= L310_CACHE_ID_RTL_R2P0)
-                       writel_relaxed(l2x0_saved_regs.prefetch_ctrl,
-                                      base + L2X0_PREFETCH_CTRL);
+                       l2c_write_sec(l2x0_saved_regs.prefetch_ctrl, base,
+                                     L2X0_PREFETCH_CTRL);
                if (revision >= L310_CACHE_ID_RTL_R3P0)
-                       writel_relaxed(l2x0_saved_regs.pwr_ctrl,
-                                      base + L2X0_POWER_CTRL);
+                       l2c_write_sec(l2x0_saved_regs.pwr_ctrl, base,
+                                     L2X0_POWER_CTRL);
 
                l2c_enable(base, l2x0_saved_regs.aux_ctrl, 8);
        }
        l2x0_size = ways * (data->way_size_0 << way_size_bits);
 
        fns = data->outer_cache;
+       fns.write_sec = outer_cache.write_sec;
        if (data->fixup)
                data->fixup(l2x0_base, cache_id, &fns);
+       if (fns.write_sec)
+               fns.set_debug = NULL;
 
        /*
         * Check if l2x0 controller is already enabled.  If we are booting