[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Xen-devel] [PATCH v7 12/12] xen: clarify the security-support status of Kconfig options on ARM

>>> On 25.07.18 at 10:46, <julien.grall@xxxxxxx> wrote:
> On 24/07/18 23:31, Stefano Stabellini wrote:
>> Yes, memaccess will default to enable. However, SUPPORT.md says it is
>> not security supported, hence, the result is that the .config is not
>> security supported, according to (3).
> We really don't want that. That arm64_defconfig is the default config 
> for Xen. Anyone using it will not be security supported.
> Distros will likely use the default config as it enables everything. If 
> I were a package maintainer, I would expect at minimum to security 
> support the .config. This does not mean that using a specific feature 
> will be supported.

Exactly - what the .config enables should not matter as long as the
enabled feature is not in use.


Xen-devel mailing list



Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.