From: Juergen Gross <jgross@suse.com>
Date: Thu, 29 Sep 2022 11:07:35 +0000 (+0200)
Subject: SUPPORT.md: clarify support of untrusted driver domains with oxenstored
X-Git-Tag: RELEASE-4.13.5~19
X-Git-Url: http://xenbits.xensource.com/gitweb?a=commitdiff_plain;h=e30f7c6b6b8e08ec4dfc7ca9ffdc556e597182c4;p=xen.git

SUPPORT.md: clarify support of untrusted driver domains with oxenstored

Add a support statement for the scope of support regarding different
Xenstore variants. Especially oxenstored does not (yet) have security
support of untrusted driver domains, as those might drive oxenstored
out of memory by creating lots of watch events for the guests they are
servicing.

Add a statement regarding Live Update support of oxenstored.

This is part of XSA-326.

Signed-off-by: Juergen Gross <jgross@suse.com>
Acked-by: George Dunlap <george.dunlap@citrix.com>
Acked-by: Julien Grall <jgrall@amazon.com>
Reviewed-by: Christian Lindig <christian.lindig@citrix.com>
(cherry picked from commit c7bc20d8d123851a468402bbfc9e3330efff21ec)
---

diff --git a/SUPPORT.md b/SUPPORT.md
index 3f4a01101e..2db341c1d8 100644
--- a/SUPPORT.md
+++ b/SUPPORT.md
@@ -149,6 +149,17 @@ Output of information in machine-parseable JSON format
 
     Status: Supported
 
+## Xenstore
+
+### C xenstored daemon
+
+    Status: Supported
+
+### OCaml xenstored daemon
+
+    Status: Supported
+    Status, untrusted driver domains: Supported, not security supported
+
 ## Toolstack/3rd party
 
 ### libvirt driver for xl