Re: [PATCH 2/2] arch: ensure idle domain is not left privileged

2022-04-05 Thread Daniel P. Smith
On 4/5/22 04:26, Jan Beulich wrote: > On 31.03.2022 01:05, Daniel P. Smith wrote: >> --- a/xen/arch/x86/setup.c >> +++ b/xen/arch/x86/setup.c >> @@ -589,6 +589,9 @@ static void noinline init_done(void) >> void *va; >> unsigned long start, end; >> >> +/* Ensure idle domain was not le

Re: [PATCH 2/2] arch: ensure idle domain is not left privileged

2022-04-05 Thread Jan Beulich
On 31.03.2022 01:05, Daniel P. Smith wrote: > --- a/xen/arch/x86/setup.c > +++ b/xen/arch/x86/setup.c > @@ -589,6 +589,9 @@ static void noinline init_done(void) > void *va; > unsigned long start, end; > > +/* Ensure idle domain was not left privileged */ > +ASSERT(current->domai

Re: [PATCH 2/2] arch: ensure idle domain is not left privileged

2022-04-04 Thread Daniel P. Smith
On 3/31/22 08:46, Roger Pau Monné wrote: > On Wed, Mar 30, 2022 at 07:05:49PM -0400, Daniel P. Smith wrote: >> It is now possible to promote the idle domain to privileged during setup. It >> is not desirable for the idle domain to still be privileged when moving into >> a >> running state. If the

Re: [PATCH 2/2] arch: ensure idle domain is not left privileged

2022-03-31 Thread Stefano Stabellini
On Thu, 31 Mar 2022, Julien Grall wrote: > On 31/03/2022 13:46, Roger Pau Monné wrote: > > On Wed, Mar 30, 2022 at 07:05:49PM -0400, Daniel P. Smith wrote: > > > It is now possible to promote the idle domain to privileged during setup. > > > It > > > is not desirable for the idle domain to still be

Re: [PATCH 2/2] arch: ensure idle domain is not left privileged

2022-03-31 Thread Julien Grall
Hi, On 31/03/2022 13:46, Roger Pau Monné wrote: On Wed, Mar 30, 2022 at 07:05:49PM -0400, Daniel P. Smith wrote: It is now possible to promote the idle domain to privileged during setup. It is not desirable for the idle domain to still be privileged when moving into a running state. If the idl

Re: [PATCH 2/2] arch: ensure idle domain is not left privileged

2022-03-31 Thread Roger Pau Monné
On Wed, Mar 30, 2022 at 07:05:49PM -0400, Daniel P. Smith wrote: > It is now possible to promote the idle domain to privileged during setup. It > is not desirable for the idle domain to still be privileged when moving into a > running state. If the idle domain was elevated and not properly demoted