[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [PATCH v4 1/3] xsm: only search for a policy file when needed
- To: "Daniel P. Smith" <dpsmith@xxxxxxxxxxxxxxxxxxxx>
- From: Jan Beulich <jbeulich@xxxxxxxx>
- Date: Thu, 2 Jun 2022 11:25:48 +0200
- Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=suse.com; dmarc=pass action=none header.from=suse.com; dkim=pass header.d=suse.com; arc=none
- Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=h84eh+LwxOmJ1STbZjiq0E+X9h89ANQX3Xr6OCQww/w=; b=mx1RG4sYRdh/Kt8p/zNOuBT96BA2ccD5rxgMGhhwqCxjyRfwrYYEJD+vbWttWEHdpa9SG0/xcgkxTxNPXCrEEjboSpsk3BQ6JdsbuZl2mQWfaNGdsQ2q2eZXeJT0FoLWX8kGBGsCDA/dmvVoMRMYx8lVUxz1FbKK7W6YGgz/gN+DdgF1xmWU7AcXr2AV5iGpb6NJC71goPO4gJl61c/8zS+QJyPUkQiaXhzjAWdjOShJzIRRamztw/jY5hcvoI+oW8uj1Uk3NW/fVKDfgWHHfhaeV/llriKhl7xQUf10976h3aQH9UWFNa+SuJULDtNNK0nCQ6cpho2IQEUGU4VWDQ==
- Arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=n8m6vW+NElyWtIvfAqpNQe8CZgbaRjm/E4q+fg9BuqzVf/CdqqdEkARzPuqet7Luhd4pDZsyd54uyfH3sERf6ppHx4BZHppUDFGOBc77l2xHsWcbLHZW6fSis5glxgLTQJ9G+UKJ4Tq41vDNHhxS+cTIBjyqskP+wgSwCBSLhuhgJWInuKwRUZIhKHqdj8S+sBjB1RqbhqRGWnpjGEIYufoQqiNEkRsc3t+vnbAmuuhQ/OJOD79hx4ccn54haAuZ1fJbSot5FleyLWq00rZtWihxBe/mWD3LGwMMHdMBAvKvIc3IWOX7gPQBe4g0IZjj1kcoX+Zzw/bY+TetF2HoNg==
- Authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=suse.com;
- Cc: scott.davis@xxxxxxxxxx, christopher.clark@xxxxxxxxxx, jandryuk@xxxxxxxxx, Daniel De Graaf <dgdegra@xxxxxxxxxxxxx>, xen-devel@xxxxxxxxxxxxxxxxxxxx
- Delivery-date: Thu, 02 Jun 2022 09:26:06 +0000
- List-id: Xen developer discussion <xen-devel.lists.xenproject.org>
On 31.05.2022 20:20, Daniel P. Smith wrote:
> It is possible to select a few different build configurations that results in
> the unnecessary walking of the boot module list looking for a policy module.
> This specifically occurs when the flask policy is enabled but either the dummy
> or the SILO policy is selected as the enforcing policy. This is not ideal for
> configurations like hyperlaunch and dom0less when there could be a number of
> modules to be walked or doing an unnecessary device tree lookup.
>
> This patch introduces the policy_file_required flag for tracking when an XSM
> policy module requires a policy file. Only when the policy_file_required flag
> is set to true, will XSM search the boot modules for a policy file.
>
> Signed-off-by: Daniel P. Smith <dpsmith@xxxxxxxxxxxxxxxxxxxx>
> Reviewed-by: Jan Beulich <jbeulich@xxxxxxxx>
> ---
> xen/xsm/xsm_core.c | 16 ++++++++++++++--
> 1 file changed, 14 insertions(+), 2 deletions(-)
FTAOD my (later) v3 comments still apply; v4 simply appeared too quickly.
Jan
|
