Re: [Xen-devel] [PATCH 3/4] xen/arm: support vcpu_op hypercalls

[Stefano Stabellini <stefano.stabellini@xxxxxxxxxxxxx>]

On Tue, 9 Apr 2013, Ian Campbell wrote:
> On Thu, 2013-03-21 at 18:42 +0000, Stefano Stabellini wrote:
> 
> It's possible that we might want to restrict the available operations?
> e.g. remove VPCUOP_initialize/up if we are doing this via PSCI instead?
> 
> My concern is that there have been security bugs in VCPUOP_initialize on
> x86 in the past and if we don't have to expose that possibility on ARM
> lets not.

I think that restricting the vcpu_op available is a good idea. Smaller
the ABI, smaller the surface of attack.

However the resulting patch won't be extremely pretty (usually all
hypercalls go straight to common code).

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxx
http://lists.xen.org/xen-devel