[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[xen staging-4.15] SUPPORT.md: clarify support of untrusted driver domains with oxenstored



commit 26faa6b55881445c25e7e83613c2354090fdff18
Author:     Juergen Gross <jgross@xxxxxxxx>
AuthorDate: Thu Sep 29 13:07:35 2022 +0200
Commit:     Andrew Cooper <andrew.cooper3@xxxxxxxxxx>
CommitDate: Tue Nov 1 15:03:25 2022 +0000

    SUPPORT.md: clarify support of untrusted driver domains with oxenstored
    
    Add a support statement for the scope of support regarding different
    Xenstore variants. Especially oxenstored does not (yet) have security
    support of untrusted driver domains, as those might drive oxenstored
    out of memory by creating lots of watch events for the guests they are
    servicing.
    
    Add a statement regarding Live Update support of oxenstored.
    
    This is part of XSA-326.
    
    Signed-off-by: Juergen Gross <jgross@xxxxxxxx>
    Acked-by: George Dunlap <george.dunlap@xxxxxxxxxx>
    Acked-by: Julien Grall <jgrall@xxxxxxxxxx>
    Reviewed-by: Christian Lindig <christian.lindig@xxxxxxxxxx>
    (cherry picked from commit c7bc20d8d123851a468402bbfc9e3330efff21ec)
---
 SUPPORT.md | 13 +++++++++----
 1 file changed, 9 insertions(+), 4 deletions(-)

diff --git a/SUPPORT.md b/SUPPORT.md
index 0fb262f81f..48fb462221 100644
--- a/SUPPORT.md
+++ b/SUPPORT.md
@@ -179,13 +179,18 @@ Support for running qemu-xen device model in a linux 
stubdomain.
 
     Status: Tech Preview
 
-## Liveupdate of C xenstored daemon
+## Xenstore
 
-    Status: Tech Preview
+### C xenstored daemon
 
-## Liveupdate of OCaml xenstored daemon
+    Status: Supported
+    Status, Liveupdate: Tech Preview
 
-    Status: Tech Preview
+### OCaml xenstored daemon
+
+    Status: Supported
+    Status, untrusted driver domains: Supported, not security supported
+    Status, Liveupdate: Not functional
 
 ## Toolstack/3rd party
 
--
generated by git-patchbot for /home/xen/git/xen.git#staging-4.15



 


Rackspace

Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.