Re: [Xen-devel] [PATCH v3 2/3] xen/pvh: check permissions when adding MMIO regions

["Jan Beulich" <JBeulich@xxxxxxxx>]

>>> On 22.01.15 at 21:28, <konrad.wilk@xxxxxxxxxx> wrote:
> On Thu, Jan 22, 2015 at 04:19:22PM +0100, Roger Pau Monne wrote:
>> Check that MMIO regions added to PVH Dom0 are allowed. Previously a PVH Dom0
>> would have access to the full MMIO range.
> 
> How do we do this for normal PV dom0? Do we enforce the same
> restriction?

We do, at the MMU level at least. Thing is (see an earlier
reply, maybe on Elena's thread) that we may still be too lax.

Jan


_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxx
http://lists.xen.org/xen-devel