[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [Xen-devel] [PATCH 2/3] docs/cmdline: Move XSM to be in alphabetical order
Adjust the default line to note that the default is now selectable in Kconfig. Signed-off-by: Andrew Cooper <andrew.cooper3@xxxxxxxxxx> --- CC: George Dunlap <George.Dunlap@xxxxxxxxxxxxx> CC: Ian Jackson <ian.jackson@xxxxxxxxxx> CC: Jan Beulich <JBeulich@xxxxxxxx> CC: Konrad Rzeszutek Wilk <konrad.wilk@xxxxxxxxxx> CC: Stefano Stabellini <sstabellini@xxxxxxxxxx> CC: Tim Deegan <tim@xxxxxxx> CC: Wei Liu <wei.liu2@xxxxxxxxxx> CC: Julien Grall <julien.grall@xxxxxxx> --- docs/misc/xen-command-line.markdown | 32 ++++++++++++++++---------------- 1 file changed, 16 insertions(+), 16 deletions(-) diff --git a/docs/misc/xen-command-line.markdown b/docs/misc/xen-command-line.markdown index 8097b7a..175d462 100644 --- a/docs/misc/xen-command-line.markdown +++ b/docs/misc/xen-command-line.markdown @@ -870,22 +870,6 @@ hardware domain is architecture dependent. Note that specifying zero as domU value means zero, while for dom0 it means to use the default. -### xsm -> `= dummy | flask | silo` - -> Default: `dummy` - -Specify which XSM module should be enabled. This option is only available if -the hypervisor was compiled with XSM support. - -* `dummy`: this is the default choice. Basic restriction for common deployment - (the dummy module) will be applied. It's also used when XSM is compiled out. -* `flask`: this is the policy based access control. To choose this, the - separated option in kconfig must also be enabled. -* `silo`: this will deny any unmediated communication channels between - unprivileged VMs. To choose this, the separated option in kconfig must also - be enabled. - ### flask > `= permissive | enforcing | late | disabled` @@ -2180,3 +2164,19 @@ for dom0 or guest domains only. > Default: `true` Permit use of the `xsave/xrstor` instructions. + +### xsm +> `= dummy | flask | silo` + +> Default: `dummy`, selectable via Kconfig. + +Specify which XSM module should be enabled. This option is only available if +the hypervisor was compiled with CONFIG\_XSM enabled. + +* `dummy`: this is the default choice. Basic restriction for common deployment + (the dummy module) will be applied. It's also used when XSM is compiled out. +* `flask`: this is the policy based access control. To choose this, the + separated option in kconfig must also be enabled. +* `silo`: this will deny any unmediated communication channels between + unprivileged VMs. To choose this, the separated option in kconfig must also + be enabled. -- 2.1.4 _______________________________________________ Xen-devel mailing list Xen-devel@xxxxxxxxxxxxxxxxxxxx https://lists.xenproject.org/mailman/listinfo/xen-devel
|
Lists.xenproject.org is hosted with RackSpace, monitoring our |