This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
Home Products Support Community News


[Xen-devel] [Patch] Dynamic update to device ocontexts

To: xen-devel@xxxxxxxxxxxxxxxxxxx
Subject: [Xen-devel] [Patch] Dynamic update to device ocontexts
From: Paul Nuzzi <pjnuzzi@xxxxxxxxxxxxxx>
Date: Fri, 13 Nov 2009 15:32:20 -0500
Cc: "George S. Coker, II" <gscoker@xxxxxxxxxxxxxx>
Delivery-date: Fri, 13 Nov 2009 12:41:41 -0800
Envelope-to: www-data@xxxxxxxxxxxxxxxxxxx
List-help: <mailto:xen-devel-request@lists.xensource.com?subject=help>
List-id: Xen developer discussion <xen-devel.lists.xensource.com>
List-post: <mailto:xen-devel@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/mailman/listinfo/xen-devel>, <mailto:xen-devel-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/mailman/listinfo/xen-devel>, <mailto:xen-devel-request@lists.xensource.com?subject=unsubscribe>
Sender: xen-devel-bounces@xxxxxxxxxxxxxxxxxxx
Added the ability to add and delete ocontexts dynamically on a running
system.  Two new commands have been added to the xsm hypercall, add and
delete ocontext.  Twelve new library functions have been implemented
that use the hypercall commands to label and unlabel pirqs, PCI devices,
I/O ports and memory.  The base policy has been updated so dom0 has the
ability to use the hypercall commands by default.  Items added to the
list will not be present next time the system reloads.  They will need
to be added to the static policy.

Signed-off-by : George Coker <gscoker@xxxxxxxxxxxxxx>

Signed-off-by : Paul Nuzzi <pjnuzzi@xxxxxxxxxxxxxx>


 tools/flask/libflask/flask_op.c                |  233
 tools/flask/libflask/include/flask.h           |   19 +
 tools/flask/policy/policy/flask/access_vectors |    2
 tools/flask/policy/policy/modules/xen/xen.te   |    2
 xen/include/public/xsm/flask_op.h              |    4
 xen/xsm/flask/flask_op.c                       |  103 +++++++++
 xen/xsm/flask/include/av_perm_to_string.h      |    2
 xen/xsm/flask/include/av_permissions.h         |    2
 xen/xsm/flask/include/security.h               |    4
 xen/xsm/flask/ss/services.c                    |  274
 10 files changed, 642 insertions(+), 3 deletions(-)

Attachment: dynamic_ocontexts.patch
Description: Text Data

Xen-devel mailing list
<Prev in Thread] Current Thread [Next in Thread>