Messages in this thread | | | Date | Thu, 31 Jul 2014 13:49:10 -0400 | Subject | Re: [Xen-devel] [PATCH 1/2] xen: Implement ioctl to restrict privcmd to a specific domain | From | George Dunlap <> |
| |
On Thu, Jul 31, 2014 at 10:11 AM, David Vrabel <david.vrabel@citrix.com> wrote: > On 31/07/14 14:53, Ian Campbell wrote: >> On Thu, 2014-07-31 at 14:16 +0100, Frediano Ziglio wrote: >> >>> include/xen/interface/domctl.h | 1090 ++++++++++++++++++++++++++++++++++++ >> >> domctl is an stable toolstack only hypervisor interface, so the kernel >> cannot use it because it would then break. > > Ok. I guess we'll have to resurrect the idea to do something with XSM.
What kind of thing did you have in mind for XSM?
In general it seems like allowing a vcpu to switch into an XSM label (not sure I've got the terminology right here) when it context switches into a particular process might be the most flexible way for that to work.
But would that actually be easier than implementing stub domains?
-George
| |