Re: [Xen-devel] [PATCH v2 2/3] xen/pvh: check permissions when adding MMIO regions

2015-01-22 Thread Tim Deegan
At 18:19 + on 20 Jan (1421774373), Andrew Cooper wrote: > On 20/01/15 17:05, Roger Pau Monne wrote: > > Check that MMIO regions added to PVH Dom0 are allowed. Previously a PVH Dom0 > > would have access to the full MMIO range. > > > > Signed-off-by: Roger Pau Monné > > Cc: Jan Beulich > > Cc:

Re: [Xen-devel] [PATCH v2 2/3] xen/pvh: check permissions when adding MMIO regions

2015-01-21 Thread Andrew Cooper
On 21/01/15 10:08, Roger Pau Monné wrote: > El 20/01/15 a les 19.19, Andrew Cooper ha escrit: >> On 20/01/15 17:05, Roger Pau Monne wrote: >>> Check that MMIO regions added to PVH Dom0 are allowed. Previously a PVH Dom0 >>> would have access to the full MMIO range. >>> >>> Signed-off-by: Roger Pau

Re: [Xen-devel] [PATCH v2 2/3] xen/pvh: check permissions when adding MMIO regions

2015-01-21 Thread Jan Beulich
>>> On 20.01.15 at 18:05, wrote: > --- a/xen/arch/x86/domain_build.c > +++ b/xen/arch/x86/domain_build.c > @@ -319,12 +319,25 @@ static __init void pvh_add_mem_mapping(struct domain > *d, unsigned long gfn, > unsigned long mfn, unsigned long > nr_mfns) >

Re: [Xen-devel] [PATCH v2 2/3] xen/pvh: check permissions when adding MMIO regions

2015-01-21 Thread Roger Pau Monné
El 20/01/15 a les 19.19, Andrew Cooper ha escrit: > On 20/01/15 17:05, Roger Pau Monne wrote: >> Check that MMIO regions added to PVH Dom0 are allowed. Previously a PVH Dom0 >> would have access to the full MMIO range. >> >> Signed-off-by: Roger Pau Monné >> Cc: Jan Beulich >> Cc: Andrew Cooper

Re: [Xen-devel] [PATCH v2 2/3] xen/pvh: check permissions when adding MMIO regions

2015-01-20 Thread Andrew Cooper
On 20/01/15 17:05, Roger Pau Monne wrote: > Check that MMIO regions added to PVH Dom0 are allowed. Previously a PVH Dom0 > would have access to the full MMIO range. > > Signed-off-by: Roger Pau Monné > Cc: Jan Beulich > Cc: Andrew Cooper > --- > Changes since v1: > - Use the newly introduced p2

[Xen-devel] [PATCH v2 2/3] xen/pvh: check permissions when adding MMIO regions

2015-01-20 Thread Roger Pau Monne
Check that MMIO regions added to PVH Dom0 are allowed. Previously a PVH Dom0 would have access to the full MMIO range. Signed-off-by: Roger Pau Monné Cc: Jan Beulich Cc: Andrew Cooper --- Changes since v1: - Use the newly introduced p2m_access_t to set the access type. - Don't add a next labe