[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [PATCH v2 2/6] x86/P2M: relax permissions of PVH Dom0's MMIO entries
- To: Jan Beulich <jbeulich@xxxxxxxx>
- From: Andrew Cooper <andrew.cooper3@xxxxxxxxxx>
- Date: Mon, 6 Sep 2021 20:23:24 +0100
- Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=citrix.com; dmarc=pass action=none header.from=citrix.com; dkim=pass header.d=citrix.com; arc=none
- Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=HhdcBXvKAHOjeRXnQDNqYRtYE6DpLidMQx5V6Wm9xSg=; b=CJEx8dAL9Eqrb4KSQJKYTEy1zeBS6BzZ07/WtWERETKh7ATe8z2VbNxIa+Sr/we6cr6EISTqzsMTn5Xr5n6TDIQLkSnGqkcNeqpgvkQpFV1Stk7p7qVKNjsxKXmTiqpVFsFKFb0eknr4hrT+4iLQJ5deVC3z+CDDpeGXhTyHGyW+UcsQzhC2bWJc8ysYZnCPzmIxhtbAUzLmWGUg4hwcsWP7YPSYSoysU9vVlMncB+RNP9I890FmHCcJgWRTzVz48a4rbjXJCu1tIbn0vF/Rk6TS71JubZnbJU/LSpW83yVUcjgc0DaVzIVM7YPDt6O1MAhEWt6IwxrQ3aeufuYTXQ==
- Arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=ag9pRZsMEtDDmFEPfgaiAV78PBfhrV7rpAweLAWjqWYfTBfhzv85CtRCSeE8m3ErB0YKQNja0izaZ55r0rM9R2S22LtR0HuaewiyUVpFCFXbMz+0pW4mYqzpZbqb2SmfN9fPnjf9KurkCGUaE1knUR8ITqq+2q7LY6EHf28iShh5VR4t5ZdqNy0jGTz9J9T71yNGmyqlt3jlL2w3E//Zwp3/2ps5sYTV6DrLhIl3FCXxFn6IkwitAcN8pRRroFEmJcpXtJQyyVCkZ/dMNceXS0PyVBgISu61vzwMLGV5hBdUuMd8JZm0ao/maG7NA4Ct3bDF1H+tPHUtIdfFPaqK2g==
- Authentication-results: esa1.hc3370-68.iphmx.com; dkim=pass (signature verified) header.i=@citrix.onmicrosoft.com
- Cc: Wei Liu <wl@xxxxxxx>, Roger Pau Monné <roger.pau@xxxxxxxxxx>, George Dunlap <george.dunlap@xxxxxxxxxx>, "xen-devel@xxxxxxxxxxxxxxxxxxxx" <xen-devel@xxxxxxxxxxxxxxxxxxxx>
- Delivery-date: Mon, 06 Sep 2021 19:23:45 +0000
- Ironport-hdrordr: A9a23:OyIpnqCr86S9l/PlHeg7sceALOsnbusQ8zAXPh9KJiC9I/b1qy nxppkmPH/P6Qr4WBkb6LS90dq7MAzhHPlOkPUs1NaZLXTbUQ6TQr2KgrGSuwEIdxeOkNK1kJ 0QCZSWa+eAfWSS7/yKmTVQeuxIqLLskNHK9JTjJjVWPGZXgslbnnZE422gYy9LrWd9dP8E/d anl7F6T23KQwVoUi33PAhIY8Hz4/nw0L72ax8PABAqrCGIkDOT8bb/VzyVxA0XXT9jyaortT GtqX222oyT99WAjjPM3W7a6Jpb3PPn19t4HcSJzuwYMC/lhAqEbJloH5eCoDc2iuey70tCqq iCnz4Qe+BIr1/BdGC8phXgnyHmzTYV8nfnjWSVhHPyyPaJDw4SOo5kv8Z0YxHZ400vsJVXy6 RQxV+UsJJREFfpgDn9z8KgbWAoqmOE5V4Z1cIDhX1WVoUTLJVLq5YEwU9TGJAcWArn9YEcFv V0Bs203ocXTbqjVQGdgoBT+q3pYpxqdS32BXTq+/blkgS+pUoJjXfxn6ck7zE9HJFUcegN2w 2LCNUwqFniJvVmGp6VP91xNPdfPFa9CC4kAFjiU2gPK5t3T04li6SHqondt9vaNaDh8vMJ6e L8uRVjxDYPR34=
- Ironport-sdr: 0lMz85qtU7JE6sIzM2Gmge97+Vp5v8v4YaLVP0BLPbmi0Em5JRTSnCV9nd7wsyALhX3Z8hr5Wl DTtwt3x5lS6SLEbGmcPhHZ4i9xRgbt041D7gyd+i4cuj+sUOSlWxgaOYcaLbOV4mNAnMrOp2ko H1yE0pNlElOGBJIVhutncGeIOegC1JCatwM2LLPYW4P7wm3dpzSREwIKO9uk2C3ALhoFWUt5RN ERmcyUbPdx1aLuhHgVjHpPN8Z/D7J1bsrCfsQRkVMDSacfSS4qrPzNw2RZWi1zOUMI9DRxQoix iZymO7lNz4YoQZ1m7k/WMq5n
- List-id: Xen developer discussion <xen-devel.lists.xenproject.org>
On 06/09/2021 16:55, Jan Beulich wrote:
> On 06.09.2021 17:48, Andrew Cooper wrote:
>> On 02/09/2021 09:33, Jan Beulich wrote:
>>> To become independent of the sequence of mapping operations, permit
>>> "access" to accumulate for Dom0, noting that there's not going to be an
>>> introspection agent for it which this might interfere with. While e.g.
>>> ideally only ROM regions would get mapped with X set, getting there is
>>> quite a bit of work.
>> ?
>>
>> That's literally the opposite of what needs to happen to fix this bug.
>> Introspection is the only interface which should be restricting X
>> permissions.
> What agent would be handling access violations in Dom0?
None. dom0 really shouldn't have any NX mappings in the first place.
~Andrew
|
