Re: [Xen-devel] [RFC][v2][PATCH 00/14] Fix RMRR

2015-05-29 Thread Chen, Tiejun
On 2015/5/28 15:55, Jan Beulich wrote: On 28.05.15 at 07:48, wrote: On 2015/5/22 17:46, Jan Beulich wrote: On 22.05.15 at 11:35, wrote: As you know all devices are owned by Dom0 firstly before we create any DomU, right? Do we allow Dom0 still own a group device while assign another device in

Re: [Xen-devel] [RFC][v2][PATCH 00/14] Fix RMRR

2015-05-28 Thread Jan Beulich
>>> On 28.05.15 at 07:48, wrote: > On 2015/5/22 17:46, Jan Beulich wrote: > On 22.05.15 at 11:35, wrote: >>> As you know all devices are owned by Dom0 firstly before we create any >>> DomU, right? Do we allow Dom0 still own a group device while assign another >>> device in the same group? >>

Re: [Xen-devel] [RFC][v2][PATCH 00/14] Fix RMRR

2015-05-27 Thread Chen, Tiejun
On 2015/5/22 17:46, Jan Beulich wrote: On 22.05.15 at 11:35, wrote: As you know all devices are owned by Dom0 firstly before we create any DomU, right? Do we allow Dom0 still own a group device while assign another device in the same group? Clearly not, or - just like anything else putting th

Re: [Xen-devel] [RFC][v2][PATCH 00/14] Fix RMRR

2015-05-22 Thread Jan Beulich
>>> On 22.05.15 at 11:35, wrote: > As you know all devices are owned by Dom0 firstly before we create any > DomU, right? Do we allow Dom0 still own a group device while assign another > device in the same group? Clearly not, or - just like anything else putting the security of a system at risk -

[Xen-devel] [RFC][v2][PATCH 00/14] Fix RMRR

2015-05-22 Thread Tiejun Chen
v2: * Instead of that fixed predefined rdm memory boundary, we'd like to introduce a parameter, "rdm_mem_boundary", to set this threshold value. * Remove that existing USB hack. * Make sure the MMIO regions all fit in the available resource window * Rename our policy, "force/try" -> "strict/r