From mboxrd@z Thu Jan  1 00:00:00 1970
From: Chris <hap10@tycho.ncsc.mil>
Subject: Re: [PATCH 0/8] Domain Groups: Introduction
Date: Thu, 22 Feb 2007 15:39:36 -0500
Message-ID: <45DDFF88.4050203@tycho.ncsc.mil>
References: <C202319F.9DE5%keir@xensource.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Return-path: <xen-devel-bounces@lists.xensource.com>
In-Reply-To: <C202319F.9DE5%keir@xensource.com>
List-Unsubscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-devel>,
	<mailto:xen-devel-request@lists.xensource.com?subject=unsubscribe>
List-Post: <mailto:xen-devel@lists.xensource.com>
List-Help: <mailto:xen-devel-request@lists.xensource.com?subject=help>
List-Subscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-devel>,
	<mailto:xen-devel-request@lists.xensource.com?subject=subscribe>
Sender: xen-devel-bounces@lists.xensource.com
Errors-To: xen-devel-bounces@lists.xensource.com
To: Keir Fraser <keir@xensource.com>
Cc: xen-devel@lists.xensource.com, "George S. Coker,
	II" <gscoker@alpha.ncsc.mil>
List-Id: xen-devel@lists.xenproject.org

We chose to make hypervisor extensions not because it was the only or
even the least intrusive way to do operations on a set of domains, but
because it creates new opportunities to innovate that aren't possible
otherwise.  Although this patchset provides immediately useful tools,
its major contribution is a foundation on which future developments can
be made.

One of our future developments will be VMM access control frameworks
like XSM that have the ability to specify access control policy for
groups of domains instead of just on individual domains.  For us, this
greatly simplifies both policy development and analysis.

-Chris