Re: [Xen-devel] [PATCH 4/6] xsm: flask: change the interface and default policy for xsm_map_gmfn_foregin

On 08/24/2017 08:39 AM, Jan Beulich wrote: On 24.08.17 at 13:33, wrote: Hi Jan, 2017-08-24 14:37 GMT+08:00 Jan Beulich : On 24.08.17 at 02:51, wrote: 2017-08-23 17:55 GMT+08:00 Jan Beulich : On 22.08.17 at

Re: [Xen-devel] [PATCH 4/6] xsm: flask: change the interface and default policy for xsm_map_gmfn_foregin

>>> On 24.08.17 at 13:33, wrote: > Hi Jan, > > 2017-08-24 14:37 GMT+08:00 Jan Beulich : > On 24.08.17 at 02:51, wrote: >>> 2017-08-23 17:55 GMT+08:00 Jan Beulich : >>> On 22.08.17 at 20:08,

Re: [Xen-devel] [PATCH 4/6] xsm: flask: change the interface and default policy for xsm_map_gmfn_foregin

Hi Jan, 2017-08-24 14:37 GMT+08:00 Jan Beulich : On 24.08.17 at 02:51, wrote: >> 2017-08-23 17:55 GMT+08:00 Jan Beulich : >> On 22.08.17 at 20:08, wrote: --- a/xen/include/xsm/dummy.h +++

Re: [Xen-devel] [PATCH 4/6] xsm: flask: change the interface and default policy for xsm_map_gmfn_foregin

>>> On 24.08.17 at 02:51, wrote: > 2017-08-23 17:55 GMT+08:00 Jan Beulich : > On 22.08.17 at 20:08, wrote: >>> --- a/xen/include/xsm/dummy.h >>> +++ b/xen/include/xsm/dummy.h >>> @@ -525,10 +525,12 @@ static XSM_INLINE int >>>

Re: [Xen-devel] [PATCH 4/6] xsm: flask: change the interface and default policy for xsm_map_gmfn_foregin

>>> On 23.08.17 at 19:16, wrote: > On Wed, 23 Aug 2017, Jan Beulich wrote: >> >>> On 22.08.17 at 20:08, wrote: >> > The original xsm_map_gmfn_foregin policy checks if source domain has the >> > proper >> > privileges over the target domain. Under

Re: [Xen-devel] [PATCH 4/6] xsm: flask: change the interface and default policy for xsm_map_gmfn_foregin

Hi Jan, Thanks for reviewing my patch. 2017-08-23 17:55 GMT+08:00 Jan Beulich : On 22.08.17 at 20:08, wrote: >> The original xsm_map_gmfn_foregin policy checks if source domain has the >> proper >> privileges over the target domain. Under this

Re: [Xen-devel] [PATCH 4/6] xsm: flask: change the interface and default policy for xsm_map_gmfn_foregin

On Wed, 23 Aug 2017, Jan Beulich wrote: > >>> On 22.08.17 at 20:08, wrote: > > The original xsm_map_gmfn_foregin policy checks if source domain has the > > proper > > privileges over the target domain. Under this policy, it's not allowed if a > > Dom0 > > wants to map

Re: [Xen-devel] [PATCH 4/6] xsm: flask: change the interface and default policy for xsm_map_gmfn_foregin

On 08/22/2017 10:18 PM, Zhongze Liu wrote: Hi Stefano, 2017-08-23 3:58 GMT+08:00 Stefano Stabellini : On Wed, 23 Aug 2017, Zhongze Liu wrote: The original xsm_map_gmfn_foregin policy checks if source domain has the proper privileges over the target domain. Under this

Re: [Xen-devel] [PATCH 4/6] xsm: flask: change the interface and default policy for xsm_map_gmfn_foregin

>>> On 22.08.17 at 20:08, wrote: > The original xsm_map_gmfn_foregin policy checks if source domain has the > proper > privileges over the target domain. Under this policy, it's not allowed if a > Dom0 > wants to map pages from one DomU to another, this restricts some

Re: [Xen-devel] [PATCH 4/6] xsm: flask: change the interface and default policy for xsm_map_gmfn_foregin

Hi Stefano, 2017-08-23 3:58 GMT+08:00 Stefano Stabellini : > On Wed, 23 Aug 2017, Zhongze Liu wrote: >> The original xsm_map_gmfn_foregin policy checks if source domain has the >> proper >> privileges over the target domain. Under this policy, it's not allowed if a >>

Re: [Xen-devel] [PATCH 4/6] xsm: flask: change the interface and default policy for xsm_map_gmfn_foregin

On Wed, 23 Aug 2017, Zhongze Liu wrote: > The original xsm_map_gmfn_foregin policy checks if source domain has the > proper > privileges over the target domain. Under this policy, it's not allowed if a > Dom0 > wants to map pages from one DomU to another, this restricts some useful yet > not >

[Xen-devel] [PATCH 4/6] xsm: flask: change the interface and default policy for xsm_map_gmfn_foregin

The original xsm_map_gmfn_foregin policy checks if source domain has the proper privileges over the target domain. Under this policy, it's not allowed if a Dom0 wants to map pages from one DomU to another, this restricts some useful yet not dangerous usages of the API, such as sharing pages among