All of lore.kernel.org
 help / color / mirror / Atom feed
From: Daniel De Graaf <dgdegra@tycho.nsa.gov>
To: Ian Campbell <Ian.Campbell@citrix.com>
Cc: "Keir (Xen.org)" <keir@xen.org>, Jan Beulich <JBeulich@suse.com>,
	"xen-devel@lists.xen.org" <xen-devel@lists.xen.org>
Subject: Re: [PATCH 11/20] xen: use XSM instead of IS_PRIV where duplicated
Date: Tue, 11 Sep 2012 09:33:46 -0400	[thread overview]
Message-ID: <504F3DBA.5040904@tycho.nsa.gov> (raw)
In-Reply-To: <1347354323.5305.136.camel@zakaz.uk.xensource.com>

On 09/11/2012 05:05 AM, Ian Campbell wrote:
> On Tue, 2012-09-11 at 08:29 +0100, Jan Beulich wrote:
>>>  * do_console_io has changed to IS_PRIV from an explicit domid==0
>>
>> I see a point in actually limiting this to Dom0 - that's the only
>> domain that can't possibly have a virtual console. But I'm not
>> really opposed to changing this.
> 
> On a debug and/or verbose build of the hypervisor any domain can log
> here, and pvops Linux with earlyprintk=xen and/or xen_raw_printk will do
> so - it's quite useful for debugging early start of day issues in guest
> kernels. Although I suppose we can always comment out the check locally
> when doing such debugging.

I did keep the #ifdef VERBOSE around that IS_PRIV check, although it's
not noted in the commit message. I also take advantage of earlyprintk=xen
for debugging and for minios output.
 
> It occurs to me now that perhaps this should be handled more like the
> HVM port e9 stuff (i.e. with rate limiting etc) anyway.
> 
> Ian.
> 

I also have a patch for debugging that prepends "(domid) " to the console
output to help sorting out the serial log output when many domains are
using it (which is quite helpful during bootup). Combined with rate
limiting, this should make domU serial output useful in production builds.

-- 
Daniel De Graaf
National Security Agency

  reply	other threads:[~2012-09-11 13:33 UTC|newest]

Thread overview: 49+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2012-09-10 19:48 [PATCH v2] Merge IS_PRIV checks into XSM hooks Daniel De Graaf
2012-09-10 19:48 ` [PATCH 01/20] xsm/flask: remove inherited class attributes Daniel De Graaf
2012-09-10 19:48 ` [PATCH 02/20] xsm/flask: remove unneeded create_sid field Daniel De Graaf
2012-09-10 19:48 ` [PATCH 03/20] xen: Add versions of rcu_lock_*_domain without IS_PRIV checks Daniel De Graaf
2012-09-10 19:48 ` [PATCH 04/20] xsm/flask: add domain relabel support Daniel De Graaf
2012-09-10 19:48 ` [PATCH 05/20] libxl: introduce XSM relabel on build Daniel De Graaf
2012-09-10 19:48 ` [PATCH 06/20] flask/policy: Add domain relabel example Daniel De Graaf
2012-09-10 19:49 ` [PATCH 07/20] arch/x86: add distinct XSM hooks for map/unmap Daniel De Graaf
2012-09-10 19:49 ` [PATCH 08/20] arch/x86: add missing XSM checks to XENPF_ commands Daniel De Graaf
2012-09-10 19:49 ` [PATCH 09/20] xsm/flask: Add checks on the domain performing the set_target operation Daniel De Graaf
2012-09-10 19:49 ` [PATCH 10/20] xsm: Add IS_PRIV checks to dummy XSM module Daniel De Graaf
2012-09-11  7:44   ` Jan Beulich
2012-09-11 13:24     ` Daniel De Graaf
2012-09-10 19:49 ` [PATCH 11/20] xen: use XSM instead of IS_PRIV where duplicated Daniel De Graaf
2012-09-11  7:29   ` Jan Beulich
2012-09-11  9:05     ` Ian Campbell
2012-09-11 13:33       ` Daniel De Graaf [this message]
2012-09-11 13:33         ` [PATCH] xen/console: Add domain ID to output if VERBOSE Daniel De Graaf
2012-09-11 14:23           ` Jan Beulich
2012-09-11 14:26             ` Ian Campbell
2012-09-11 14:10     ` [PATCH 11/20] xen: use XSM instead of IS_PRIV where duplicated Daniel De Graaf
2012-09-10 19:49 ` [PATCH 12/20] xen: avoid calling rcu_lock_*target_domain when an XSM hook exists Daniel De Graaf
2012-09-11  7:36   ` Jan Beulich
2012-09-11 13:26     ` Daniel De Graaf
2012-09-11 14:15       ` Jan Beulich
2012-09-10 19:49 ` [PATCH 13/20] arch/x86: Add missing domctl and mem_sharing XSM hooks Daniel De Graaf
2012-09-10 19:49 ` [PATCH 14/20] tmem: Add access control check Daniel De Graaf
2012-09-11  7:40   ` Jan Beulich
2012-09-10 19:49 ` [PATCH 15/20] xsm: remove unneeded xsm_call macro Daniel De Graaf
2012-09-10 19:49 ` [PATCH 16/20] xsm/flask: add distinct SIDs for self/target access Daniel De Graaf
2012-09-10 19:49 ` [PATCH 17/20] arch/x86: use XSM hooks for get_pg_owner access checks Daniel De Graaf
2012-09-11  7:55   ` Jan Beulich
2012-09-11 13:40     ` Daniel De Graaf
2012-09-11 14:16       ` Jan Beulich
2012-09-11 14:33         ` Daniel De Graaf
2012-09-11 14:50           ` Jan Beulich
2012-09-10 19:49 ` [PATCH 18/20] xen: Add XSM hook for XENMEM_exchange Daniel De Graaf
2012-09-10 19:49 ` [PATCH 19/20] xen: remove rcu_lock_{remote_, }target_domain_by_id Daniel De Graaf
2012-09-11  7:59   ` Jan Beulich
2012-09-10 19:49 ` [PATCH 20/20] flask: add missing operations Daniel De Graaf
2012-09-10 20:51 ` [PATCH v2] Merge IS_PRIV checks into XSM hooks Keir Fraser
2012-09-10 21:10   ` Daniel De Graaf
2012-09-10 21:13     ` [PATCH 21/20] arch/arm: replace rcu_lock_target_domain_by_id with XSM Daniel De Graaf
2012-09-10 21:35     ` [PATCH v2] Merge IS_PRIV checks into XSM hooks Keir Fraser
2012-09-11  8:54       ` Ian Campbell
2012-09-11 13:49         ` Daniel De Graaf
2012-09-11  8:09     ` Jan Beulich
2012-09-11 13:21       ` Daniel De Graaf
2012-09-11 14:11         ` Jan Beulich

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=504F3DBA.5040904@tycho.nsa.gov \
    --to=dgdegra@tycho.nsa.gov \
    --cc=Ian.Campbell@citrix.com \
    --cc=JBeulich@suse.com \
    --cc=keir@xen.org \
    --cc=xen-devel@lists.xen.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.