Re: [Xen-devel] [PATCH v7 12/12] xen: clarify the security-support status of Kconfig options on ARM

["Jan Beulich" <JBeulich@xxxxxxxx>]

>>> On 25.07.18 at 10:46, <julien.grall@xxxxxxx> wrote:
> On 24/07/18 23:31, Stefano Stabellini wrote:
>> Yes, memaccess will default to enable. However, SUPPORT.md says it is
>> not security supported, hence, the result is that the .config is not
>> security supported, according to (3).
> 
> We really don't want that. That arm64_defconfig is the default config 
> for Xen. Anyone using it will not be security supported.
> 
> Distros will likely use the default config as it enables everything. If 
> I were a package maintainer, I would expect at minimum to security 
> support the .config. This does not mean that using a specific feature 
> will be supported.

Exactly - what the .config enables should not matter as long as the
enabled feature is not in use.

Jan



_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxxx
https://lists.xenproject.org/mailman/listinfo/xen-devel