On 03.07.2019 13:37, Andrew Cooper wrote:
> On 01/02/2019 07:39, Jan Beulich wrote:
> Basically, if you've got an updated dom0 kernel, you'll be fine even
> with this default flipped. If you've forgotten/missed that, then you're
> already wide open (in a lack of defence in depth way) a
On 01/02/2019 07:39, Jan Beulich wrote:
Basically, if you've got an updated dom0 kernel, you'll be fine even
with this default flipped. If you've forgotten/missed that, then you're
already wide open (in a lack of defence in depth way) and flipping the
default here will make thi
>>> On 31.01.19 at 18:19, wrote:
> On 31/01/2019 16:54, Jan Beulich wrote:
> On 31.01.19 at 17:35, wrote:
>>> On 31/01/2019 14:25, Jan Beulich wrote:
>>> On 31.01.19 at 14:59, wrote:
> At the time XSA-273 was published, shadowing dom0 had proved to be
> unstable,
> which is
On 31/01/2019 16:54, Jan Beulich wrote:
On 31.01.19 at 17:35, wrote:
>> On 31/01/2019 14:25, Jan Beulich wrote:
>> On 31.01.19 at 14:59, wrote:
At the time XSA-273 was published, shadowing dom0 had proved to be
unstable,
which is why dom0 was unprotected by default. The
>>> On 31.01.19 at 17:35, wrote:
> On 31/01/2019 14:25, Jan Beulich wrote:
> On 31.01.19 at 14:59, wrote:
>>> At the time XSA-273 was published, shadowing dom0 had proved to be unstable,
>>> which is why dom0 was unprotected by default. The instability was
> identified
>>> to be problems wi
On 31/01/2019 14:25, Jan Beulich wrote:
On 31.01.19 at 14:59, wrote:
>> At the time XSA-273 was published, shadowing dom0 had proved to be unstable,
>> which is why dom0 was unprotected by default. The instability was identified
>> to be problems with shadowing PV superpages, and fixed.
>>
>
>>> On 31.01.19 at 14:59, wrote:
> At the time XSA-273 was published, shadowing dom0 had proved to be unstable,
> which is why dom0 was unprotected by default. The instability was identified
> to be problems with shadowing PV superpages, and fixed.
>
> In hindsight, this patch should have been p
At the time XSA-273 was published, shadowing dom0 had proved to be unstable,
which is why dom0 was unprotected by default. The instability was identified
to be problems with shadowing PV superpages, and fixed.
In hindsight, this patch should have been posted at the same time.
There is now no leg
