Re: [Qemu-devel] [PATCH] xen: additionally restrict xenforeignmemory operations

2017-03-28 Thread Paul Durrant
> -Original Message- > From: Stefano Stabellini [mailto:sstabell...@kernel.org] > Sent: 27 March 2017 18:46 > To: Paul Durrant > Cc: 'Stefano Stabellini' ; qemu-devel@nongnu.org; > xen-de...@lists.xenproject.org; Anthony Perard > > Subject: RE: [PATCH] xen: additionally restrict xenforeig

Re: [Qemu-devel] [PATCH] xen: additionally restrict xenforeignmemory operations

2017-03-27 Thread Stefano Stabellini
On Mon, 27 Mar 2017, Paul Durrant wrote: > > -Original Message- > [snip] > > > > This is OK but the file is growing too entangled. What do you think of > > the following, which moves the if CONFIG_XEN_CTRL_INTERFACE_VERSION > > < > > 40701 at the top? This way we don't have to add yet anot

Re: [Qemu-devel] [PATCH] xen: additionally restrict xenforeignmemory operations

2017-03-27 Thread Paul Durrant
> -Original Message- [snip] > > This is OK but the file is growing too entangled. What do you think of > the following, which moves the if CONFIG_XEN_CTRL_INTERFACE_VERSION > < > 40701 at the top? This way we don't have to add yet another ifdef. > Yes, this looks better and appears to DT

Re: [Qemu-devel] [PATCH] xen: additionally restrict xenforeignmemory operations

2017-03-24 Thread Stefano Stabellini
On Fri, 24 Mar 2017, Paul Durrant wrote: > Commit f0f272baf3a7 "xen: use libxendevice model to restrict operations" > added a command-line option (-xen-domid-restrict) to limit operations > using the libxendevicemodel API to a specified domid. The commit also > noted that the restriction would be e

[Qemu-devel] [PATCH] xen: additionally restrict xenforeignmemory operations

2017-03-24 Thread Paul Durrant
Commit f0f272baf3a7 "xen: use libxendevice model to restrict operations" added a command-line option (-xen-domid-restrict) to limit operations using the libxendevicemodel API to a specified domid. The commit also noted that the restriction would be extended to cover operations issued via other xen