From mboxrd@z Thu Jan 1 00:00:00 1970 From: Ian Campbell Subject: Re: Critique of the Xen Security Process Date: Wed, 11 Nov 2015 09:43:25 +0000 Message-ID: <1447235005.8556.8.camel@citrix.com> References: <20151106172228.GA2335@work-mutt> <564114BA.8060206@cardoe.com> Mime-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Return-path: In-Reply-To: <564114BA.8060206@cardoe.com> List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: xen-devel-bounces@lists.xen.org Errors-To: xen-devel-bounces@lists.xen.org To: Doug Goldstein , xen-devel@lists.xen.org List-Id: xen-devel@lists.xenproject.org T24gTW9uLCAyMDE1LTExLTA5IGF0IDE1OjQ4IC0wNjAwLCBEb3VnIEdvbGRzdGVpbiB3cm90ZToK PsKgCj4gSSdsbCBlY2hvIHRoaXMgc2VudGltZW50IGFzIHdlbGwuIE1vc3QgZGlzdHJvIHBhY2th Z2VycyB3aWxsIGRpc2xpa2UKPiB0aGlzIGFuZCBuZWVkIHRvIHdvcmsgYXJvdW5kIHNvbWUgb2Yg dGhpcyBiZWhhdmlvciBpbiB0aGVpciByZXNwZWN0aXZlCj4gZGlzdHJvcy4KClRoaXMgaXMgc29t ZXRoaW5nIHdlIGhhdmUgYmVlbiB3b3JraW5nIHVwc3RyZWFtIHRvIGFkZHJlc3MgYXMgd2VsbC4g QXMgaXQKc3RhbmRzIEkgYmVsaWV2ZSBldmVyeXRoaW5nIHdoaWNoIHRoZSB0b29scyBtaWdodCBk b3dubG9hZCBjYW4gYmUKcmVkaXJlY3RlZCB0byBpbnN0ZWFkIGFuIGV4aXN0aW5nIGNvbXBvbmVu dCAodmlhIG9uZSBvZiB0aGUgLS13aXRoLXN5c3RlbS0KZm9vIGNvbmZpZ3VyYXRpb24gb3B0aW9u cykgb3IgZGlzYWJsZWQgKHZpYSBhIC0tZGlzYWJsZS1mb28gY29uZmlndXJlCm9wdGlvbikuIFNv IEkgdGhpbmsgbm93IHRoZSBjdXJyZW50IHN0YXRlIGlzIHRoYXQgdGhlcmUgYXJlbid0CiJ3b3Jr YXJvdW5kcyIgYnV0IHJhdGhlciAic3VwcG9ydGVkIHdheXMgdG8gZGlzYWJsZSIuCgpUaGUgYmln IG91dHN0YW5kaW5nIGlzc3VlIGlzIHRoZSBzdHViZG9tIGJ1aWxkLCB0aGUgZGlzdHJvIEkgY2Fy ZSBhYm91dAptb3N0IChEZWJpYW4pIHNpbXBseSBkb2Vzbid0IGJ1aWxkIHRoZXNlIChmb3IgcmVh c29ucyBhYm92ZSBhbmQgYmV5b25kIHRoZQpkb3dubG9hZGluZykuCgo+ICBQcm9qZWN0IFJhaXNp biBpcyBhaW1pbmcgdG8gaGVscCB3aXRoIHRoaXMKCkluZGVlZCwgYW5kIGl0IG1pZ2h0IGFsc28g YWxsb3cgdXMgdG8gbWFrZSBzb21lIG9mIHRoZSBhYm92ZSBvcHRpb25zIHRoZQpkZWZhdWx0IGlu IHRoZSBmdXR1cmUuCgpNYXliZSBpbiB0aGUgbWVhbnRpbWUgcGVyaGFwcyBhIC4vY29uZmlndXJl IC0tZW5zdXJlLW9mZmxpbmUgb3IgLS1kaXNhYmxlLQpkb3dubG9hZHMgd2hpY2g6CiAqIGVpdGhl ciBkaXNhYmxlcyBzdHViZG9tcyBhdXRvbWF0aWNhbGx5IG9yIGNoZWNrcyB5b3UndmUgcGFzc2Vk IC0tCiAgIGRpc2FibGUtc3R1YmRvbSBhcyB3ZWxsCiAqIGVpdGhlciBkaXNhYmxlcyBhbGwgdGhl IG90aGVyIHRoaW5ncyB3aGljaCBtaWdodCBiZSBjbG9uZWQgb3IgcmVxdWlyZXMKICAgdGhlIGNv cnJlc3BvbmRpbmcgLS13aXRoLXN5c3RlbS1mb289LCBvciBoYXMgYSBndWVzcyBhdCBhIGRlZmF1 bHQgc3lzdGVtCiAgIHZlcnNpb24KICogc2V0cyBGRVRDSEVSIHRvIC9iaW4vZmFsc2UKCndvdWxk IGJlIHVzZWZ1bD8gKGVzc2VudGlhbGx5IGFzIGEgZ3VhcmQgYWdhaW5zdCBuZXcgb3B0aW9ucyBi ZWluZyByZXF1aXJlZAp0byB0dXJuIHN0dWZmIG9mZikuCgo+ICBidXQgaXQgZG9lc24ndCBzZWVt Cj4gdG8gaGF2ZSBhIGxvdCBvZiBjb21tdW5pdHkgZWZmb3J0IGJlaGluZCBpdCBhbmQgaXQgdG9v IGF0dGVtcHRzIHRvCj4gaW5zdGFsbCBkZXBlbmRlbmNpZXMgb24gbXkgbWFjaGluZSBhbmQgd2Fu dHMgdG8gYmUgcnVuIHdpdGggc3Vkby4KCkkgYmVsaWV2ZSBpdCBoYXMgYSBtb2RlIHdoZXJlIGl0 IHNpbXBseSBjaGVja3MgZm9yIGRlcGVuZGVuY2llcyBhbmQgdGVsbHMKeW91IHdoYXQgaXMgcmVx dWlyZWQgYW5kIHRoZXJlYnkgYXZvaWRzIHRoZSBuZWVkIGZvciBzdWRvLCBidXQgSSdtIG5vdApz dXJlLgoKSWFuLgoKX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X18KWGVuLWRldmVsIG1haWxpbmcgbGlzdApYZW4tZGV2ZWxAbGlzdHMueGVuLm9yZwpodHRwOi8v bGlzdHMueGVuLm9yZy94ZW4tZGV2ZWwK