Re: [Xen-devel] [PATCH v2] xen: additionally restrict xenforeignmemory operations

2017-03-28 Thread Stefano Stabellini
On Tue, 28 Mar 2017, Paul Durrant wrote: > Commit f0f272baf3a7 "xen: use libxendevice model to restrict operations" > added a command-line option (-xen-domid-restrict) to limit operations > using the libxendevicemodel API to a specified domid. The commit also > noted that the restriction would be e

[Xen-devel] [PATCH v2] xen: additionally restrict xenforeignmemory operations

2017-03-28 Thread Paul Durrant
Commit f0f272baf3a7 "xen: use libxendevice model to restrict operations" added a command-line option (-xen-domid-restrict) to limit operations using the libxendevicemodel API to a specified domid. The commit also noted that the restriction would be extended to cover operations issued via other xen