From mboxrd@z Thu Jan 1 00:00:00 1970 From: Matthew Fioravante Subject: Re: [PATCH] drivers/tpm: add xen tpmfront interface (Re: [PATCH 01/12]...) Date: Tue, 26 Mar 2013 13:16:48 -0400 Message-ID: <5151D800.1050505@jhuapl.edu> References: <1363896689-11086-1-git-send-email-dgdegra@tycho.nsa.gov> <1363896689-11086-2-git-send-email-dgdegra@tycho.nsa.gov> <5151CCF9.1070307@jhuapl.edu> <5151D230.7070101@tycho.nsa.gov> Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="===============3667271787789138929==" Return-path: In-Reply-To: <5151D230.7070101@tycho.nsa.gov> List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: xen-devel-bounces@lists.xen.org Errors-To: xen-devel-bounces@lists.xen.org To: Daniel De Graaf Cc: Konrad Rzeszutek Wilk , "Ian.Campbell@citrix.com" , "xen-devel@lists.xen.org" List-Id: xen-devel@lists.xenproject.org This is a cryptographically signed message in MIME format. --===============3667271787789138929== Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha1; boundary="------------ms030409060600060604010203" This is a cryptographically signed message in MIME format. --------------ms030409060600060604010203 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: quoted-printable Daniel, this looks great. Thank you for taking the effort to rewrite=20 that awful tpm driver. The only comment I have for you which is a carry-over from my previous=20 feedback from konrad is to include a copy of /docs/misc/vtpm.txt as=20 Documentation/xen-tpmfront.txt, with a note of where to get the latest=20 version in xen. I believe he also asked for a copy of the entire document in the commit=20 message. Acked-by: Matthew Fioravante On 03/26/2013 12:52 PM, Daniel De Graaf wrote: > Original subject: Re: [PATCH 01/12] mini-os/tpm{back,front}: Change sha= red page ABI > > On 03/26/2013 12:29 PM, Matthew Fioravante wrote: >> I'm going to merge your linux changes into my working linux patch with= the fixes that are in response to konrad's comments. Will test with this= on the mini-os end and get back to you. >> >> After that, we can look at the remaining patches. > The changes that I posted to this vTPM patch still leave a lot of the > unneeded relics from using a packet interface for vTPM commands. The pa= tch > below properly uses Linux's TPM interface, and is far simpler than the > other driver (while also supporting features such as command cancellati= on). > I would prefer that this driver be considered instead of my previously > posted patch to your forward port of the 2.6.18-xen.hg driver. > > I have tested this patch with HVM and PV guests, interfacing with a min= i-os > vTPM using my patches. The PV guest was tested both with and without pv= -grub > loading the kernel and using the vTPM to report measurements. > > ---------------------8<-------------------------------------- > [PATCH] drivers/tpm: add xen tpmfront interface > > This is a complete rewrite of the Xen TPM frontend driver, taking > advantage of a simplified frontend/backend interface and adding support= > for cancellation and timeouts. > > Signed-off-by: Daniel De Graaf > --- > This patch is based off Linux 3.9-rc4 > > drivers/char/tpm/Kconfig | 11 + > drivers/char/tpm/Makefile | 1 + > drivers/char/tpm/xen-tpmfront.c | 423 +++++++++++++++++++++++++++++= ++++++++++ > include/xen/interface/io/tpmif.h | 50 +++++ > 4 files changed, 485 insertions(+) > create mode 100644 drivers/char/tpm/xen-tpmfront.c > create mode 100644 include/xen/interface/io/tpmif.h > > diff --git a/drivers/char/tpm/Kconfig b/drivers/char/tpm/Kconfig > index dbfd564..205ed35 100644 > --- a/drivers/char/tpm/Kconfig > +++ b/drivers/char/tpm/Kconfig > @@ -91,4 +91,15 @@ config TCG_ST33_I2C > To compile this driver as a module, choose M here; the modul= e will be > called tpm_stm_st33_i2c. > > +config TCG_XEN > + tristate "XEN TPM Interface" > + depends on TCG_TPM && XEN > + ---help--- > + If you want to make TPM support available to a Xen user domai= n, > + say Yes and it will be accessible from within Linux. See > + the manpages for xl, xl.conf, and docs/misc/vtpm.txt in > + the Xen source repository for more details. > + To compile this driver as a module, choose M here; the module= > + will be called xen-tpmfront. > + > endif # TCG_TPM > diff --git a/drivers/char/tpm/Makefile b/drivers/char/tpm/Makefile > index a3736c9..eb41ff9 100644 > --- a/drivers/char/tpm/Makefile > +++ b/drivers/char/tpm/Makefile > @@ -18,3 +18,4 @@ obj-$(CONFIG_TCG_ATMEL) +=3D tpm_atmel.o > obj-$(CONFIG_TCG_INFINEON) +=3D tpm_infineon.o > obj-$(CONFIG_TCG_IBMVTPM) +=3D tpm_ibmvtpm.o > obj-$(CONFIG_TCG_ST33_I2C) +=3D tpm_i2c_stm_st33.o > +obj-$(CONFIG_TCG_XEN) +=3D xen-tpmfront.o > diff --git a/drivers/char/tpm/xen-tpmfront.c b/drivers/char/tpm/xen-tpm= front.c > new file mode 100644 > index 0000000..1eb8de1 > --- /dev/null > +++ b/drivers/char/tpm/xen-tpmfront.c > @@ -0,0 +1,423 @@ > +#include > +#include > +#include > +#include > +#include > +#include > +#include > +#include > +#include > +#include > +#include > +#include "tpm.h" > + > +struct tpm_private { > + struct tpm_chip *chip; > + struct xenbus_device *dev; > + > + struct vtpm_shared_page *shr; > + > + unsigned int evtchn; > + int ring_ref; > + domid_t backend_id; > +}; > + > +enum status_bits { > + VTPM_STATUS_RUNNING =3D 0x1, > + VTPM_STATUS_IDLE =3D 0x2, > + VTPM_STATUS_RESULT =3D 0x4, > + VTPM_STATUS_CANCELED =3D 0x8, > +}; > + > +static u8 vtpm_status(struct tpm_chip *chip) > +{ > + struct tpm_private *priv =3D TPM_VPRIV(chip); > + switch (priv->shr->state) { > + case VTPM_STATE_IDLE: > + return VTPM_STATUS_IDLE | VTPM_STATUS_CANCELED; > + case VTPM_STATE_FINISH: > + return VTPM_STATUS_IDLE | VTPM_STATUS_RESULT; > + case VTPM_STATE_SUBMIT: > + case VTPM_STATE_CANCEL: /* cancel requested, not yet canceled *= / > + return VTPM_STATUS_RUNNING; > + default: > + return 0; > + } > +} > + > +static bool vtpm_req_canceled(struct tpm_chip *chip, u8 status) > +{ > + return status & VTPM_STATUS_CANCELED; > +} > + > +static void vtpm_cancel(struct tpm_chip *chip) > +{ > + struct tpm_private *priv =3D TPM_VPRIV(chip); > + priv->shr->state =3D VTPM_STATE_CANCEL; > + notify_remote_via_evtchn(priv->evtchn); > +} > + > +static int vtpm_send(struct tpm_chip *chip, u8 *buf, size_t count) > +{ > + struct tpm_private *priv =3D TPM_VPRIV(chip); > + struct vtpm_shared_page *shr =3D priv->shr; > + unsigned int offset =3D sizeof(*shr) + 4*shr->nr_extra_pages; > + > + u32 ordinal; > + unsigned long duration; > + > + if (count < TPM_HEADER_SIZE) > + return -EIO; > + > + if (offset > PAGE_SIZE) > + return -EIO; > + > + if (offset + count > PAGE_SIZE) > + return -EIO; > + > + /* Wait for completion of any existing command or cancellation = */ > + if (wait_for_tpm_stat(chip, VTPM_STATUS_IDLE, chip->vendor.time= out_c, > + &chip->vendor.read_queue, true) < 0) { > + vtpm_cancel(chip); > + return -ETIME; > + } > + > + memcpy(offset + (u8 *)shr, buf, count); > + shr->length =3D count; > + barrier(); > + shr->state =3D VTPM_STATE_SUBMIT; > + notify_remote_via_evtchn(priv->evtchn); > + > + ordinal =3D be32_to_cpu(*((__be32 *) (buf + 6))); > + duration =3D tpm_calc_ordinal_duration(chip, ordinal); > + > + if (wait_for_tpm_stat(chip, VTPM_STATUS_IDLE, duration, > + &chip->vendor.read_queue, true) < 0) { > + /* got a signal or timeout, try to cancel */ > + vtpm_cancel(chip); > + return -ETIME; > + } > + > + return count; > +} > + > +static int vtpm_recv(struct tpm_chip *chip, u8 *buf, size_t count) > +{ > + struct tpm_private *priv =3D TPM_VPRIV(chip); > + struct vtpm_shared_page *shr =3D priv->shr; > + unsigned int offset =3D sizeof(*shr) + 4*shr->nr_extra_pages; > + size_t length =3D shr->length; > + > + if (shr->state =3D=3D VTPM_STATE_IDLE) > + return -ECANCELED; > + > + /* In theory the wait at the end of _send makes this one unnece= ssary */ > + if (wait_for_tpm_stat(chip, VTPM_STATUS_RESULT, chip->vendor.ti= meout_c, > + &chip->vendor.read_queue, true) < 0) { > + vtpm_cancel(chip); > + return -ETIME; > + } > + > + if (offset > PAGE_SIZE) > + return -EIO; > + > + if (offset + length > PAGE_SIZE) > + length =3D PAGE_SIZE - offset; > + > + if (length > count) > + length =3D count; > + > + memcpy(buf, offset + (u8 *)shr, count); > + > + return length; > +} > + > +static const struct file_operations vtpm_ops =3D { > + .owner =3D THIS_MODULE, > + .llseek =3D no_llseek, > + .open =3D tpm_open, > + .read =3D tpm_read, > + .write =3D tpm_write, > + .release =3D tpm_release, > +}; > + > +static DEVICE_ATTR(pubek, S_IRUGO, tpm_show_pubek, NULL); > +static DEVICE_ATTR(pcrs, S_IRUGO, tpm_show_pcrs, NULL); > +static DEVICE_ATTR(enabled, S_IRUGO, tpm_show_enabled, NULL); > +static DEVICE_ATTR(active, S_IRUGO, tpm_show_active, NULL); > +static DEVICE_ATTR(owned, S_IRUGO, tpm_show_owned, NULL); > +static DEVICE_ATTR(temp_deactivated, S_IRUGO, tpm_show_temp_deactivate= d, > + NULL); > +static DEVICE_ATTR(caps, S_IRUGO, tpm_show_caps, NULL); > +static DEVICE_ATTR(cancel, S_IWUSR | S_IWGRP, NULL, tpm_store_cancel);= > +static DEVICE_ATTR(durations, S_IRUGO, tpm_show_durations, NULL); > +static DEVICE_ATTR(timeouts, S_IRUGO, tpm_show_timeouts, NULL); > + > +static struct attribute *vtpm_attrs[] =3D { > + &dev_attr_pubek.attr, > + &dev_attr_pcrs.attr, > + &dev_attr_enabled.attr, > + &dev_attr_active.attr, > + &dev_attr_owned.attr, > + &dev_attr_temp_deactivated.attr, > + &dev_attr_caps.attr, > + &dev_attr_cancel.attr, > + &dev_attr_durations.attr, > + &dev_attr_timeouts.attr, > + NULL, > +}; > + > +static struct attribute_group vtpm_attr_grp =3D { > + .attrs =3D vtpm_attrs > +}; > + > +#define TPM_LONG_TIMEOUT (10 * 60 * HZ) > + > +static const struct tpm_vendor_specific tpm_vtpm =3D { > + .status =3D vtpm_status, > + .recv =3D vtpm_recv, > + .send =3D vtpm_send, > + .cancel =3D vtpm_cancel, > + .req_complete_mask =3D VTPM_STATUS_IDLE | VTPM_STATUS_RESULT, > + .req_complete_val =3D VTPM_STATUS_IDLE | VTPM_STATUS_RESULT, > + .req_canceled =3D vtpm_req_canceled, > + .attr_group =3D &vtpm_attr_grp, > + .miscdev =3D { > + .fops =3D &vtpm_ops, > + }, > + .duration =3D { > + TPM_LONG_TIMEOUT, > + TPM_LONG_TIMEOUT, > + TPM_LONG_TIMEOUT, > + }, > +}; > + > +static irqreturn_t tpmif_interrupt(int dummy, void *dev_id) > +{ > + struct tpm_private *priv =3D dev_id; > + > + switch (priv->shr->state) { > + case VTPM_STATE_IDLE: > + case VTPM_STATE_FINISH: > + wake_up_interruptible(&priv->chip->vendor.read_queue); > + break; > + case VTPM_STATE_SUBMIT: > + case VTPM_STATE_CANCEL: > + default: > + break; > + } > + return IRQ_HANDLED; > +} > + > +static int setup_chip(struct device *dev, struct tpm_private *priv) > +{ > + struct tpm_chip *chip; > + > + chip =3D tpm_register_hardware(dev, &tpm_vtpm); > + if (!chip) > + return -ENODEV; > + > + init_waitqueue_head(&chip->vendor.read_queue); > + > + priv->chip =3D chip; > + TPM_VPRIV(chip) =3D priv; > + > + return 0; > +} > + > +static int setup_ring(struct xenbus_device *dev, struct tpm_private *p= riv) > +{ > + struct xenbus_transaction xbt; > + const char *message =3D NULL; > + int rv; > + > + priv->shr =3D (void *)__get_free_page(GFP_KERNEL|__GFP_ZERO); > + if (!priv->shr) { > + xenbus_dev_fatal(dev, -ENOMEM, "allocating shared ring"= ); > + return -ENOMEM; > + } > + > + rv =3D xenbus_grant_ring(dev, virt_to_mfn(priv->shr)); > + if (rv < 0) > + return rv; > + > + priv->ring_ref =3D rv; > + > + rv =3D xenbus_alloc_evtchn(dev, &priv->evtchn); > + if (rv) > + return rv; > + > + rv =3D bind_evtchn_to_irqhandler(priv->evtchn, tpmif_interrupt,= 0, > + "tpmif", priv); > + if (rv <=3D 0) { > + xenbus_dev_fatal(dev, rv, "allocating TPM irq"); > + return rv; > + } > + priv->chip->vendor.irq =3D rv; > + > + again: > + rv =3D xenbus_transaction_start(&xbt); > + if (rv) { > + xenbus_dev_fatal(dev, rv, "starting transaction"); > + return rv; > + } > + > + rv =3D xenbus_printf(xbt, dev->nodename, > + "ring-ref", "%u", priv->ring_ref); > + if (rv) { > + message =3D "writing ring-ref"; > + goto abort_transaction; > + } > + > + rv =3D xenbus_printf(xbt, dev->nodename, "event-channel", "%u",= > + priv->evtchn); > + if (rv) { > + message =3D "writing event-channel"; > + goto abort_transaction; > + } > + > + rv =3D xenbus_printf(xbt, dev->nodename, "feature-protocol-v2",= "1"); > + if (rv) { > + message =3D "writing feature-protocol-v2"; > + goto abort_transaction; > + } > + > + rv =3D xenbus_transaction_end(xbt, 0); > + if (rv =3D=3D -EAGAIN) > + goto again; > + if (rv) { > + xenbus_dev_fatal(dev, rv, "completing transaction"); > + return rv; > + } > + > + xenbus_switch_state(dev, XenbusStateInitialised); > + > + return 0; > + > + abort_transaction: > + xenbus_transaction_end(xbt, 1); > + if (message) > + xenbus_dev_error(dev, rv, "%s", message); > + > + return rv; > +} > + > +static void ring_free(struct tpm_private *priv) > +{ > + if (priv->ring_ref) > + gnttab_end_foreign_access(priv->ring_ref, 0, > + (unsigned long)priv->shr); > + > + if (priv->chip && priv->chip->vendor.irq) > + unbind_from_irqhandler(priv->chip->vendor.irq, priv); > + > + free_page((unsigned long)priv->shr); > + kfree(priv); > +} > + > +static int tpmfront_probe(struct xenbus_device *dev, > + const struct xenbus_device_id *id) > +{ > + struct tpm_private *priv; > + int rv; > + > + priv =3D kzalloc(sizeof(*priv), GFP_KERNEL); > + if (!priv) { > + xenbus_dev_fatal(dev, -ENOMEM, "allocating priv structu= re"); > + return -ENOMEM; > + } > + > + rv =3D setup_chip(&dev->dev, priv); > + if (rv) { > + kfree(priv); > + return rv; > + } > + > + rv =3D setup_ring(dev, priv); > + if (rv) { > + tpm_remove_hardware(&dev->dev); > + ring_free(priv); > + return rv; > + } > + > + tpm_get_timeouts(priv->chip); > + > + dev_set_drvdata(&dev->dev, priv->chip); > + > + return rv; > +} > + > +static int tpmfront_remove(struct xenbus_device *dev) > +{ > + struct tpm_chip *chip =3D dev_get_drvdata(&dev->dev); > + struct tpm_private *priv =3D TPM_VPRIV(chip); > + tpm_remove_hardware(&dev->dev); > + ring_free(priv); > + return 0; > +} > + > +static int tpmfront_resume(struct xenbus_device *dev) > +{ > + /* A suspend/resume/migrate will interrupt a vTPM anyway */ > + tpmfront_remove(dev); > + return tpmfront_probe(dev, NULL); > +} > + > +static void backend_changed(struct xenbus_device *dev, > + enum xenbus_state backend_state) > +{ > + int val; > + > + switch (backend_state) { > + case XenbusStateInitialised: > + case XenbusStateConnected: > + if (xenbus_scanf(XBT_NIL, dev->otherend, > + "feature-protocol-v2", "%d", &val) < 0)= > + val =3D 0; > + if (!val) { > + xenbus_dev_fatal(dev, -EINVAL, > + "vTPM protocol 2 required"); > + return; > + } > + xenbus_switch_state(dev, XenbusStateConnected); > + break; > + > + case XenbusStateClosing: > + case XenbusStateClosed: > + device_unregister(&dev->dev); > + xenbus_frontend_closed(dev); > + break; > + default: > + break; > + } > +} > + > +static const struct xenbus_device_id tpmfront_ids[] =3D { > + { "vtpm" }, > + { "" } > +}; > +MODULE_ALIAS("xen:vtpm"); > + > +static DEFINE_XENBUS_DRIVER(tpmfront, , > + .probe =3D tpmfront_probe, > + .remove =3D tpmfront_remove, > + .resume =3D tpmfront_resume, > + .otherend_changed =3D backend_changed, > + ); > + > +static int __init xen_tpmfront_init(void) > +{ > + if (!xen_domain()) > + return -ENODEV; > + > + return xenbus_register_frontend(&tpmfront_driver); > +} > +module_init(xen_tpmfront_init); > + > +static void __exit xen_tpmfront_exit(void) > +{ > + xenbus_unregister_driver(&tpmfront_driver); > +} > +module_exit(xen_tpmfront_exit); > + > +MODULE_LICENSE("Dual BSD/GPL"); > diff --git a/include/xen/interface/io/tpmif.h b/include/xen/interface/i= o/tpmif.h > new file mode 100644 > index 0000000..92522a4 > --- /dev/null > +++ b/include/xen/interface/io/tpmif.h > @@ -0,0 +1,50 @@ > +/*********************************************************************= ********* > + * tpmif.h > + * > + * TPM I/O interface for Xen guest OSes, v2 > + * > + * Permission is hereby granted, free of charge, to any person obtaini= ng a copy > + * of this software and associated documentation files (the "Software"= ), to > + * deal in the Software without restriction, including without limitat= ion the > + * rights to use, copy, modify, merge, publish, distribute, sublicense= , and/or > + * sell copies of the Software, and to permit persons to whom the Soft= ware is > + * furnished to do so, subject to the following conditions: > + * > + * The above copyright notice and this permission notice shall be incl= uded in > + * all copies or substantial portions of the Software. > + * > + * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXP= RESS OR > + * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABI= LITY, > + * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT S= HALL THE > + * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OT= HER > + * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARI= SING > + * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER= > + * DEALINGS IN THE SOFTWARE. > + * > + */ > + > +#ifndef __XEN_PUBLIC_IO_TPMIF_H__ > +#define __XEN_PUBLIC_IO_TPMIF_H__ > + > +enum vtpm_shared_page_state { > + VTPM_STATE_IDLE, /* no contents / vTPM idle / cancel co= mplete */ > + VTPM_STATE_SUBMIT, /* request ready / vTPM working */ > + VTPM_STATE_FINISH, /* response ready / vTPM idle */ > + VTPM_STATE_CANCEL, /* cancel requested / vTPM working */ > +}; > +/* The backend should only change state to IDLE or FINISH, while the > + * frontend should only change to SUBMIT or CANCEL. */ > + > + > +struct vtpm_shared_page { > + uint32_t length; /* request/response length in bytes */= > + > + uint8_t state; /* enum vtpm_shared_page_state */ > + uint8_t locality; /* for the current request */ > + uint8_t pad; > + > + uint8_t nr_extra_pages; /* extra pages for long packets; may b= e zero */ > + uint32_t extra_pages[0]; /* grant IDs; length in nr_extra_pages= */ > +}; > + > +#endif > -- > 1.8.1.4 > --------------ms030409060600060604010203 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIDyjCC A8YwggMvoAMCAQICBD/xyf0wDQYJKoZIhvcNAQEFBQAwLzELMAkGA1UEBhMCVVMxDzANBgNV BAoTBkpIVUFQTDEPMA0GA1UECxMGQklTRENBMB4XDTEwMDYxMTE4MjIwNloXDTEzMDYxMTE4 NTIwNlowZjELMAkGA1UEBhMCVVMxDzANBgNVBAoTBkpIVUFQTDEPMA0GA1UECxMGUGVvcGxl MTUwFgYDVQQLEw9WUE5Hcm91cC1CSVNEQ0EwGwYDVQQDExRNYXR0aGV3IEUgRmlvcmF2YW50 ZTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAnpbwVSP6o1Nb5lcW7dd3yTo9iBJdi7qz 4nANOMFPK7JOy5npKN1iiousl28U/scUJES55gPwAWYJK3uVyQAsA4adgDKi5DoD1UHDQEwp bY7iHLJeq0NPr4BqYNqnCFPbE6HC8zSJrr4qKn+gVUQT39SIFqdiIPJwZL8FYTRQ/zsCAwEA AaOCAbYwggGyMAsGA1UdDwQEAwIHgDArBgNVHRAEJDAigA8yMDEwMDYxMTE4MjIwNlqBDzIw MTIwNzE3MjI1MjA2WjAbBg0rBgEEAbMlCwMBAQEBBAoWCGZpb3JhbWUxMBsGDSsGAQQBsyUL AwEBAQIEChIIMDAxMDQyNjEwWAYJYIZIAYb6ax4BBEsMSVRoZSBwcml2YXRlIGtleSBjb3Jy ZXNwb25kaW5nIHRvIHRoaXMgY2VydGlmaWNhdGUgbWF5IGhhdmUgYmVlbiBleHBvcnRlZC4w KAYDVR0RBCEwH4EdTWF0dGhldy5GaW9yYXZhbnRlQGpodWFwbC5lZHUwUgYDVR0fBEswSTBH oEWgQ6RBMD8xCzAJBgNVBAYTAlVTMQ8wDQYDVQQKEwZKSFVBUEwxDzANBgNVBAsTBkJJU0RD QTEOMAwGA1UEAxMFQ1JMNTYwHwYDVR0jBBgwFoAUCDUpmxH52EU2CyWmF2EJMB1yqeswHQYD VR0OBBYEFO6LYxg6r9wHZ+zdQtBHn1dZ/YTNMAkGA1UdEwQCMAAwGQYJKoZIhvZ9B0EABAww ChsEVjcuMQMCBLAwDQYJKoZIhvcNAQEFBQADgYEAJO9HQh4YNChVLzuZqK5ARJARD8JoujGZ fdo75quvg2jXFQe2sEjvLnxJZgm/pv8fdZakq48CWwjYHKuvIp7sDjTEsQfo+y7SpN/N2NvJ WU5SqfK1VgYtNLRRoGJUB5Q1aZ+Dg95g3kqpyfpUMISJL8IKVLtJVfN4fggFVUYZ9wwxggGr MIIBpwIBATA3MC8xCzAJBgNVBAYTAlVTMQ8wDQYDVQQKEwZKSFVBUEwxDzANBgNVBAsTBkJJ U0RDQQIEP/HJ/TAJBgUrDgMCGgUAoIHLMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJ KoZIhvcNAQkFMQ8XDTEzMDMyNjE3MTY0OFowIwYJKoZIhvcNAQkEMRYEFOzATXBeoenihWh7 1UFKHwH/iHQXMGwGCSqGSIb3DQEJDzFfMF0wCwYJYIZIAWUDBAEqMAsGCWCGSAFlAwQBAjAK BggqhkiG9w0DBzAOBggqhkiG9w0DAgICAIAwDQYIKoZIhvcNAwICAUAwBwYFKw4DAgcwDQYI KoZIhvcNAwICASgwDQYJKoZIhvcNAQEBBQAEgYBS2+YR46uvHDY/sldiUBSahsvjZddJkaif 5s3DFOQdMlyLuCn1sXju2LMlX13hwRCMo6v+5MQbMFWMdVGwQz7SQ0AYsFOnLG3UBT4vXDqh Bntj8xDFPDPTY7fIId/B38J6ILTMO2XZnKgoetXw02/w6eMzJEBqBmdHoQ2lQdvQ0AAAAAAA AA== --------------ms030409060600060604010203-- --===============3667271787789138929== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Xen-devel mailing list Xen-devel@lists.xen.org http://lists.xen.org/xen-devel --===============3667271787789138929==--