This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
Home Products Support Community News


[Xen-devel] protecting xen startup

To: xen-devel@xxxxxxxxxxxx
Subject: [Xen-devel] protecting xen startup
From: Luke Kenneth Casson Leighton <lkcl@xxxxxxxx>
Date: Tue, 23 Nov 2004 17:05:46 +0000
Delivery-date: Tue, 23 Nov 2004 16:57:36 +0000
Envelope-to: xen+James.Bulpin@xxxxxxxxxxxx
List-archive: <http://sourceforge.net/mailarchive/forum.php?forum=xen-devel>
List-help: <mailto:xen-devel-request@lists.sourceforge.net?subject=help>
List-id: List for Xen developers <xen-devel.lists.sourceforge.net>
List-post: <mailto:xen-devel@lists.sourceforge.net>
List-subscribe: <https://lists.sourceforge.net/lists/listinfo/xen-devel>, <mailto:xen-devel-request@lists.sourceforge.net?subject=subscribe>
List-unsubscribe: <https://lists.sourceforge.net/lists/listinfo/xen-devel>, <mailto:xen-devel-request@lists.sourceforge.net?subject=unsubscribe>
Sender: xen-devel-admin@xxxxxxxxxxxxxxxxxxxxx
User-agent: Mutt/

i notice that there's a management interface on port 8000.

i seek to protect this interface such that nothing but a trusted program
(think selinux) may run, manage, start up or shut down xen oses.

so: where can i find out information about the structure of the
xen management interface?

is the port 8000 stuff just providing a web server (/etc/init.d/xend)
front-end to some extra system calls?

is the port 8000 stuff actually running in the xen boot-up stuff?

if it's some extra system calls that's very good because it will be
possible to add selinux security hooks to protect each system call.



<a href="http://lkcl.net";>http://lkcl.net</a>

SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now. 
Xen-devel mailing list

<Prev in Thread] Current Thread [Next in Thread>