On Mon, Nov 05, 2018 at 11:16:40AM +0000, Andrew Cooper wrote: > From: Sergey Dyasli <[email protected]> > > This finally (after literally years of work!) marks the point where the > toolstack can ask the hypervisor for the current CPUID configuration of a > specific domain. > > Introduce a new flask access vector and update the default policies. > > Also extend xen-cpuid's --policy mode to be able to take a domid and dump a > specific domains CPUID and MSR policy. > > Signed-off-by: Andrew Cooper <[email protected]> > Signed-off-by: Sergey Dyasli <[email protected]> > --- > CC: Jan Beulich <[email protected]> > CC: Ian Jackson <[email protected]> > CC: Wei Liu <[email protected]> > CC: Roger Pau Monné <[email protected]> > CC: Sergey Dyasli <[email protected]> > CC: Daniel De Graaf <[email protected]> > > v3: > * Misc code hygene > * Fix comments to avoid having a SYSCTL/DOMCTL paste error > * Introduce a new flask vector rather than reusing set_cpuid > --- > tools/flask/policy/modules/dom0.te | 2 +- > tools/flask/policy/modules/xen.if | 2 +- > tools/libxc/include/xenctrl.h | 3 ++ > tools/libxc/xc_cpuid_x86.c | 38 ++++++++++++++++++++++++ > tools/misc/xen-cpuid.c | 58 > ++++++++++++++++++++++++++++++++-----
Acked-by: Wei Liu <[email protected]> _______________________________________________ Xen-devel mailing list [email protected] https://lists.xenproject.org/mailman/listinfo/xen-devel
