Re: [Xen-devel] [PATCH RFC 01/15] xen: allow console_io hypercalls from DomUs on ARM

[Julien Grall <julien.grall@xxxxxxx>]

Hi Stefano,

On 13/06/18 23:15, Stefano Stabellini wrote:
> This is very useful when starting multiple domains from Xen without
> xenstore access. It will allow them to print out to the Xen console.
>
> Signed-off-by: Stefano Stabellini <stefanos@xxxxxxxxxx>
> CC: andrew.cooper3@xxxxxxxxxx
> CC: George.Dunlap@xxxxxxxxxxxxx
> CC: ian.jackson@xxxxxxxxxxxxx
> CC: jbeulich@xxxxxxxx
> CC: konrad.wilk@xxxxxxxxxx
> CC: tim@xxxxxxx
> CC: wei.liu2@xxxxxxxxxx
> CC: dgdegra@xxxxxxxxxxxxx
> ---
> If there is a better way to do this with XSM, please advise.
We definitely need to keep the XSM around to avoid opening a hole. We 
also don't want all the domain to access the console.
Looking at the implementation, any domain with is_privileged will be 
able to access the console. IHMO, I don't think we should set that for 
DomU created by Xen.
So I would suggest to introduce a new variable is_console and to tell 
whether a domain can access the console. xsm_console_io(...) would then 
need to be updated accordingly.
Cheers,

--
Julien Grall

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxxx
https://lists.xenproject.org/mailman/listinfo/xen-devel