From mboxrd@z Thu Jan 1 00:00:00 1970 From: Frediano Ziglio Subject: Re: [PATCH 1/2] xen: Implement ioctl to restrict privcmd to a specific domain Date: Thu, 31 Jul 2014 15:43:43 +0100 Message-ID: References: <1406814787.10395.2.camel@kazak.uk.xensource.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Return-path: Received: from mail6.bemta4.messagelabs.com ([85.158.143.247]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1XCraQ-00083i-Qm for xen-devel@lists.xenproject.org; Thu, 31 Jul 2014 14:44:06 +0000 In-Reply-To: List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: xen-devel-bounces@lists.xen.org Errors-To: xen-devel-bounces@lists.xen.org To: David Vrabel Cc: xen-devel , Boris Ostrovsky , Ian Campbell , linux-kernel , linux-api@vger.kernel.org List-Id: xen-devel@lists.xenproject.org On Thu, 2014-07-31 at 15:11 +0100, David Vrabel wrote: > On 31/07/14 14:53, Ian Campbell wrote: > > On Thu, 2014-07-31 at 14:16 +0100, Frediano Ziglio wrote: > > > >> include/xen/interface/domctl.h | 1090 ++++++++++++++++++++++++++++++++++++ > > > > domctl is an stable toolstack only hypervisor interface, so the kernel > > cannot use it because it would then break. > > Ok. I guess we'll have to resurrect the idea to do something with XSM. > > David > The code just require that: - sizeof(struct xen_domctl) does not increase; - position and size of cmd, domain and interface_version does not change; - XEN_DOMCTL_createdomain is 1. For safety there is a check on interface_version. Frediano