Hi Julien,

On 23.08.18 16:43, Julien Grall wrote:


I don't think we should use XSM to enforce the use of TEE. This contradictory to your next patch where you let the user configure OP-TEE for a given guest.

IHMO, XSM should only be used to restrict usage of calls in a fine grain. For an overall control, that should be go through a DOMCTL tell Xen to initialize OP-TEE for that domain.

Just to be sure. You are proposing to add flag "TEE_ENABLED" for a domain and set it during domain construction, based on configuration, right?

What did you mean by "fine grain"?

--
Volodymyr Babchuk

_______________________________________________
Xen-devel mailing list
[email protected]
https://lists.xenproject.org/mailman/listinfo/xen-devel

Reply via email to