From mboxrd@z Thu Jan 1 00:00:00 1970 From: Jacob Gorm Hansen Subject: Re: Building domains as a lesser user (was Re: boot loaders for domain != 0) Date: Thu, 03 Feb 2005 19:38:31 -0800 Message-ID: <4202EE37.4080707@diku.dk> References: <4202EC36.8000103@codemonkey.ws> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit In-Reply-To: <4202EC36.8000103@codemonkey.ws> Sender: xen-devel-admin@lists.sourceforge.net Errors-To: xen-devel-admin@lists.sourceforge.net List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , List-Archive: To: Anthony Liguori Cc: xen-devel@lists.sourceforge.net List-Id: xen-devel@lists.xenproject.org Anthony Liguori wrote: > Jacob's two-stage approach would work although it requires a lot of > custom code. It also makes it pretty difficult to support new types of > loaders. And you still have a point of failure with that "trusted" > loader. I would disagree that the trusted loader is a point of failure. It is not trusted in the sense that we need to trust its code to behave correctly, all we need is to trust it as not being malformed data that can trigger an exploit in the domain builder, and of course it is not, given that it is supplied by you the admin and not by a (potentially hostile) user. Anyway, this code is already written for Xen 1.3. You can find it at http://www.diku.dk/~jacobg/self-migration/ Jacob ------------------------------------------------------- This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting Tool for open source databases. Create drag-&-drop reports. Save time by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc. Download a FREE copy at http://www.intelliview.com/go/osdn_nl