Re: [Xen-devel] [PATCH 00/18] RFC: Merge IS_PRIV checks into XSM hooks

[Shakeel Butt <shakeel.butt@xxxxxxxxx>]

I have just two comments:

1. Although the apparent benefit of this patch series seems dom0
disaggregation [VEE'08,SOSP'11] but (completely covered) xsm hooks
will facilitate the implementation of recently proposed system like
CloudVisor [SOSP'11] and Self-service Cloud [CCS'12] and can be used
to further explore access control and flexibility for different
scenarios.

2. This patch series is the hypervisor part of the dom0 disaggregation
idea realization. I think the next step should be applying similar
ideas to xen tools and Linux kernel. For example in Linux kernel
is_initial_domain() is equivalent to IS_PRIV, what should be the xsm
equivalent solution here. Other parts which need some discussion or
thinking are xenbus, xenstored, privcmd (and others).

Shakeel

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxx
http://lists.xen.org/xen-devel