From mboxrd@z Thu Jan  1 00:00:00 1970
From: Harry Butterworth <harry@hebutterworth.freeserve.co.uk>
Subject: Re: [PATCH][ACM] kernel enforcement of vbd
	policies	via blkback driver
Date: Thu, 27 Jul 2006 17:36:43 +0100
Message-ID: <1154018203.7906.40.camel@localhost.localdomain>
References: <OFDABE17A6.7A80C60C-ON852571B8.00519A46-852571B8.0055D20D@us.ibm.com>
	<1154017584.7906.36.camel@localhost.localdomain>
Mime-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
Return-path: <xen-devel-bounces@lists.xensource.com>
In-Reply-To: <1154017584.7906.36.camel@localhost.localdomain>
List-Unsubscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-devel>,
	<mailto:xen-devel-request@lists.xensource.com?subject=unsubscribe>
List-Post: <mailto:xen-devel@lists.xensource.com>
List-Help: <mailto:xen-devel-request@lists.xensource.com?subject=help>
List-Subscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-devel>,
	<mailto:xen-devel-request@lists.xensource.com?subject=subscribe>
Sender: xen-devel-bounces@lists.xensource.com
Errors-To: xen-devel-bounces@lists.xensource.com
To: Reiner Sailer <sailer@us.ibm.com>
Cc: Andrew Warfield <andrew.warfield@cl.cam.ac.uk>, xen-devel@lists.xensource.com, xense-devel@lists.xensource.com, Bryan D Payne <bdpayne@us.ibm.com>, ncmike@us.ibm.com
List-Id: xen-devel@lists.xenproject.org

On Thu, 2006-07-27 at 17:26 +0100, Harry Butterworth wrote:

> untrusted driver domain <-> trusted encryption domain <-> FE-domain
>                            hypervisor
>                    trusted access control domain

Another argument in favour of this kind of approach is that if your BE
is something like a fibrechannel driver for a SAN, there isn't actually
any security on the SAN side of it so any guarantees provided by the
driver domain are pretty much worthless.

Harry.