Re: [Xen-devel] Modular Xen

[Reiner Sailer <sailer@xxxxxxxxxx>]

>Mark Williamson wrote:
>
> 
> There are circumstances where it might be nice to load *something*
> into Xen at   boot time though...  I think the ACM / sHype
work supports 
>(or at least, supported at some
stage) loading policy data as a multiboot 
> module.
>
> Cheers,
> Mark

Indeed, ACM/sHype supports dynamic loading
of security policies at boot time. The policy can be provided as a multiboot
module.

We are planning to go one step further
and add a legacy (non-security) mode to the ACM. Then, an ACM-enabled Xen
kernel will offer users the option to switch security on and off at boot
time without recompilation.

Thanks
Reiner

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel