[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Xen-devel] [PATCH 1/2] xen/xsm: Introduce new boot parameter xsm
- To: Xin Li <talons.lee@xxxxxxxxx>, xen-devel@xxxxxxxxxxxxx
- From: Daniel De Graaf <dgdegra@xxxxxxxxxxxxx>
- Date: Fri, 28 Sep 2018 13:15:21 -0400
- Cc: Sergey Dyasli <sergey.dyasli@xxxxxxxxxx>, Stefano Stabellini <sstabellini@xxxxxxxxxx>, Wei Liu <wei.liu2@xxxxxxxxxx>, Konrad Rzeszutek Wilk <konrad.wilk@xxxxxxxxxx>, George Dunlap <George.Dunlap@xxxxxxxxxxxxx>, Xin Li <xin.li@xxxxxxxxxx>, Tim Deegan <tim@xxxxxxx>, Jan Beulich <JBeulich@xxxxxxxx>, Andrew Cooper <andrew.cooper3@xxxxxxxxxx>, Ming Lu <ming.lu@xxxxxxxxxx>
- Delivery-date: Fri, 28 Sep 2018 17:15:42 +0000
- Ironport-phdr: 9a23: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
- List-id: Xen developer discussion <xen-devel.lists.xenproject.org>
On 09/28/2018 04:18 AM, Xin Li wrote:
Introduce new boot parameter xsm to choose which xsm module is enabled,
and set default to dummy.
Signed-off-by: Xin Li <xin.li@xxxxxxxxxx>
This changes the default behavior of a hypervisor compiled with XSM+FLASK when
booted with no command line arguments from enabling FLASK to enabling the dummy
module. I think the default value of the "xsm=" parameter should be settable
in Kconfig to allow existing systems to continue working after an upgrade.
If not, this new command line argument needs to be mentioned in more locations
in the documentation; at least docs/misc/xsm-flask "Setting up FLASK" will need
to mention it. I think a mention in the release notes for the next version is
also a good idea (in addition to or as part of the note on the new SILO
feature),
but that's not a part of the patch.
Untested Kconfig snippet:
choice
prompt "Default XSM implementation"
default XSM_FLASK_DEFAULT if XSM_FLASK
default XSM_SILO_DEFAULT if XSM_SILO
default XSM_DUMMY_DEFAULT
config XSM_DUMMY_DEFAULT
bool "Match non-XSM behavior"
config XSM_FLASK_DEFAULT
bool "FLux Advanced Security Kernel" if XSM_FLASK
config XSM_SILO_DEFAULT
bool "SILO" if XSM_SILO
endchoice
The multiple "default" statements are intended to cause the default to be the
chosen enabled system, or dummy if there are no existing Kconfig settings.
I also think the question for XSM_FLASK should be removed from EXPERT now that
there is a reason to enable XSM without FLASK.
The name "default" might end up being misleading in this case; "none", "off",
or "dummy" might be better.
_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxxx
https://lists.xenproject.org/mailman/listinfo/xen-devel
|
