From: Peter Teoh <htmldeveloper@gmail.com>
To: xen-devel@lists.xensource.com
Subject: dom0 vs non-dom0 differentiation inside Xen hypervisor
Date: Sun, 02 Sep 2007 15:12:08 +0800 [thread overview]
Message-ID: <46DA6248.4010101@singnet.com.sg> (raw)
In some parts of IA64 I can see that domain==dom0 checking is done, but
in all x86 - I have yet to find a proper checking that the hypercalls
comes from a dom0 domain instead of any other domain.
Theoretically, this means that any domain (PV or HVM) can always modify
its own kernel binary and then make a direct hypercall (via int 0x82 or
SYSENTER) into the hypervisor, executing domain controller commands like
create domain etc.
Is this possible? Access control should be done from the hypervisor
side, so any existing dom0 checking (CONFIG_XEN_PRIVILEGED_GUEST
compilation option - done from the dom0 side) seems like useless,
because another domU can always modify its own kernel binaries to
achieve all the features what CONF_XEN_PRIVILEGED_GUEST restrict.
Am I right?
next reply other threads:[~2007-09-02 7:12 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2007-09-02 7:12 Peter Teoh [this message]
2007-09-13 12:50 ` dom0 vs non-dom0 differentiation inside Xen hypervisor Derek Murray
-- strict thread matches above, loose matches on Subject: below --
2007-09-03 0:45 Peter Teoh
2007-09-03 6:15 ` Ian Campbell
2007-09-03 13:42 ` Keir Fraser
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=46DA6248.4010101@singnet.com.sg \
--to=htmldeveloper@gmail.com \
--cc=xen-devel@lists.xensource.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.