• Daniel De Graaf's avatar
    xsm/flask: add domain relabel support · 3149754b
    Daniel De Graaf authored
    This adds the ability to change a domain's XSM label after creation.
    The new label will be used for all future access checks; however,
    existing event channels and memory mappings will remain valid even if
    their creation would be denied by the new label.
    
    With appropriate security policy and hooks in the domain builder, this
    can be used to create domains that the domain builder does not have
    access to after building. It can also be used to allow a domain to
    drop privileges - for example, prior to launching a user-supplied
    kernel loaded by a pv-grub stubdom.
    Signed-off-by: default avatarDaniel De Graaf <dgdegra@tycho.nsa.gov>
    Committed-by: default avatarKeir Fraser <keir@xen.org>
    3149754b
Name
Last commit
Last update
..
policy Loading commit data...
utils Loading commit data...
Makefile Loading commit data...