RE: [Xen-devel] problem with netfront.c

["Ian Pratt" <m+Ian.Pratt@xxxxxxxxxxxx>]

> Are the grant references capabilities, or how do you prevent 
> domains from inventing their own? 

Domains create and maintain their own grant tables. They don't have to
be capabilities to be secure.

> Who takes care of garbage-collecting them when a domain exists or
dies? 

Since Xen tracks active grant references revocation is possible, but is
a slow-path operation. 

> Can a domain DoS a Xen-system by allocating all the grant refs in 
> the system?

No...


Ian

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel