From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <linux-kernel-owner@vger.kernel.org>
Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand
        id S1751622AbdBOOsB (ORCPT <rfc822;w@1wt.eu>);
        Wed, 15 Feb 2017 09:48:01 -0500
Received: from userp1040.oracle.com ([156.151.31.81]:37579 "EHLO
        userp1040.oracle.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org
        with ESMTP id S1751223AbdBOOsA (ORCPT
        <rfc822;linux-kernel@vger.kernel.org>);
        Wed, 15 Feb 2017 09:48:00 -0500
Subject: Re: [PATCH v3 3/3] xen/privcmd: add IOCTL_PRIVCMD_RESTRICT
To: Paul Durrant <paul.durrant@citrix.com>, xen-devel@lists.xenproject.org,
        linux-kernel@vger.kernel.org
References: <1487005404-3183-1-git-send-email-paul.durrant@citrix.com>
 <1487005404-3183-4-git-send-email-paul.durrant@citrix.com>
Cc: Juergen Gross <jgross@suse.com>
From: Boris Ostrovsky <boris.ostrovsky@oracle.com>
Message-ID: <af326443-af2d-12c1-34ee-4d41940149ef@oracle.com>
Date: Wed, 15 Feb 2017 09:49:10 -0500
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101
 Thunderbird/45.6.0
MIME-Version: 1.0
In-Reply-To: <1487005404-3183-4-git-send-email-paul.durrant@citrix.com>
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: 7bit
X-Source-IP: aserv0022.oracle.com [141.146.126.234]
Sender: linux-kernel-owner@vger.kernel.org
List-ID: <linux-kernel.vger.kernel.org>
X-Mailing-List: linux-kernel@vger.kernel.org

On 02/13/2017 12:03 PM, Paul Durrant wrote:
> The purpose if this ioctl is to allow a user of privcmd to restrict its
> operation such that it will no longer service arbitrary hypercalls via
> IOCTL_PRIVCMD_HYPERCALL, and will check for a matching domid when
> servicing IOCTL_PRIVCMD_DM_OP. The aim of this is to limit the attack
> surface for a compromised device model.
>
> Signed-off-by: Paul Durrant <paul.durrant@citrix.com>


Applied to for-linus-4.11 (with commit message adjustment)

-boris