Re: [Xen-devel] [PATCH] VMX: XSA-60 workaround

["Jan Beulich" <JBeulich@xxxxxxxx>]

>>> On 19.08.13 at 20:27, Matt Wilson <msw@xxxxxxxxxx> wrote:
> On Tue, Aug 13, 2013 at 05:36:17PM +0100, Jan Beulich wrote:
>> Considering that there's still no real progress towards a resolution
>> for XSA-60, I'd like to propose turning off the probelamtic code by
>> default, allowing it to be turned back on via command line option.
> 
> Apologies for a late reply, I've been on holiday for the past week.
> 
> I think it'd be really handy to make this a per-domain configuration,
> perhaps with a system-wide default set by boot command line.

Remember this is a temporary workaround, not a solution. I'm
not going to waste time trying to make the logic more sophisticated,
but I wouldn't mind if someone else took the patch further.

> If not per-domain, it would be helpful to be configurable at boot time.

Which it is - did you overlook the addition of the
"vmx-permit-cache-disable" command line option?

Jan


_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxx
http://lists.xen.org/xen-devel