>>> On 26.05.15 at 10:05, <vkuzn...@redhat.com> wrote: > No, not really. Protecting against a misbehaving control domain > (guaranteeing the correctness of the operation) is going > to be incomplete anyway. I think we just need to make this operation > safe so even the control domain won't be able to compromise the > hypervisor by doing something nasty.
Of course, as new exceptions as per XSA-77 are not allowed. Jan _______________________________________________ Xen-devel mailing list Xen-devel@lists.xen.org http://lists.xen.org/xen-devel