[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Xen-devel] [PATCH 3/4] xen/arm: support vcpu_op hypercalls

On Tue, 9 Apr 2013, Ian Campbell wrote:
> On Thu, 2013-03-21 at 18:42 +0000, Stefano Stabellini wrote:
> It's possible that we might want to restrict the available operations?
> e.g. remove VPCUOP_initialize/up if we are doing this via PSCI instead?
> My concern is that there have been security bugs in VCPUOP_initialize on
> x86 in the past and if we don't have to expose that possibility on ARM
> lets not.

I think that restricting the vcpu_op available is a good idea. Smaller
the ABI, smaller the surface of attack.

However the resulting patch won't be extremely pretty (usually all
hypercalls go straight to common code).

Xen-devel mailing list



Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.