Re: [Xen-devel] [PATCH v2] xenstore: remove XS_RESTRICT support

2017-01-23 Thread Wei Liu
On Mon, Jan 23, 2017 at 01:34:21PM +0100, Juergen Gross wrote: > On 23/01/17 13:14, Wei Liu wrote: > > On Mon, Jan 23, 2017 at 12:32:55PM +0100, Juergen Gross wrote: > >> XS_RESTRICT and the xenstore library function xs_restrict() have never > >> been usable in all configurations and there are no k

Re: [Xen-devel] [PATCH v2] xenstore: remove XS_RESTRICT support

2017-01-23 Thread Juergen Gross
On 23/01/17 13:14, Wei Liu wrote: > On Mon, Jan 23, 2017 at 12:32:55PM +0100, Juergen Gross wrote: >> XS_RESTRICT and the xenstore library function xs_restrict() have never >> been usable in all configurations and there are no known users. >> >> This functionality was thought to limit access rights

Re: [Xen-devel] [PATCH v2] xenstore: remove XS_RESTRICT support

2017-01-23 Thread Wei Liu
On Mon, Jan 23, 2017 at 12:32:55PM +0100, Juergen Gross wrote: > XS_RESTRICT and the xenstore library function xs_restrict() have never > been usable in all configurations and there are no known users. > > This functionality was thought to limit access rights of device models > to xenstore in orde

[Xen-devel] [PATCH v2] xenstore: remove XS_RESTRICT support

2017-01-23 Thread Juergen Gross
XS_RESTRICT and the xenstore library function xs_restrict() have never been usable in all configurations and there are no known users. This functionality was thought to limit access rights of device models to xenstore in order to avoid affecting other domains in case of a security breech. Unfortun