]> xenbits.xensource.com Git - xen.git/commit
xen: list interfaces subject to the security process exception in XSA-77
authorIan Campbell <ian.campbell@citrix.com>
Tue, 10 Dec 2013 15:09:24 +0000 (16:09 +0100)
committerJan Beulich <jbeulich@suse.com>
Tue, 10 Dec 2013 15:09:24 +0000 (16:09 +0100)
commit5da5288a0a767c16705dd16ee5e5bb5cf7929397
treea7ac738daf8e35235e49a36cc77f05d4b41407c5
parentf290d0cb3142606faf13dc9bc76766631cc17e92
xen: list interfaces subject to the security process exception in XSA-77

List all the sub ops of:
  __HYPERVISOR_domctl
  __HYPERVISOR_sysctl
  __HYPERVISOR_memory_op
  __HYPERVISOR_tmem_op
which are subject to the policy given in
http://xenbits.xen.org/xsa/advisory-77.html

It is expected that these lists will be whittled away as each interface is
audited for safety.

New interfaces should be expected to be safe when introduced (IOW the list
should never be expanded).

This is XSA-77.

Signed-off-by: Ian Campbell <ian.campbell@citrix.com>
Reviewed-by: Jan Beulich <jbeulich@suse.com>
docs/misc/xsm-flask.txt