On 13.05.2025 17:59, Kevin Lampis wrote: > On Tue, May 13, 2025 at 3:32 PM Jan Beulich <[email protected]> wrote: >> >> Well, it's easily possible to catch that error without any extra parsing. > > If `lockdown` is not the first argument then we should print a warning > to tell the user that Xen may have already parsed some insecure > arguments and lockdown mode will not be effective. > > What would be a good way to check if lockdown is or isn't the first > argument? I am not sure.
It'll be a little hack-ish, I suppose (yet the option is quite special, after all), but I can see various options. For example, have the resulting variable not be boolean, and OR in a separate flag after parsing the first option. Then warn if the flag is clear after all options were parsed. Jan
