RE: [Xen-devel] problem with netfront.c

["Ian Pratt" <m+Ian.Pratt@xxxxxxxxxxxx>]

> > It's not actually a security problem, but using mfns is a bit ugly.
> > 
> I mean for a full-virtualization domain, if the guest can map 
> any mfn to its pfn, it will not be secure. 

It can't unless the fully virtualized domain is fully privileged, which
it shouldn't be.

> I have a quick look at the grant table, Is the main point 
> that put the mfn to the table and get an id, and then give 
> other domain an id, so the other domain is allowed to map that mfn?

Yes, that's how it works.

Thanks,
Ian

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel