From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1752881AbdBMTUj (ORCPT ); Mon, 13 Feb 2017 14:20:39 -0500 Received: from aserp1040.oracle.com ([141.146.126.69]:48914 "EHLO aserp1040.oracle.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751578AbdBMTUi (ORCPT ); Mon, 13 Feb 2017 14:20:38 -0500 Subject: Re: [PATCH v3 3/3] xen/privcmd: add IOCTL_PRIVCMD_RESTRICT To: Paul Durrant , xen-devel@lists.xenproject.org, linux-kernel@vger.kernel.org References: <1487005404-3183-1-git-send-email-paul.durrant@citrix.com> <1487005404-3183-4-git-send-email-paul.durrant@citrix.com> Cc: Juergen Gross From: Boris Ostrovsky Message-ID: <98d4ae78-98f0-c3fd-e8c8-cdb18a7936e1@oracle.com> Date: Mon, 13 Feb 2017 14:20:27 -0500 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.7.0 MIME-Version: 1.0 In-Reply-To: <1487005404-3183-4-git-send-email-paul.durrant@citrix.com> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit X-Source-IP: userv0021.oracle.com [156.151.31.71] Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On 02/13/2017 12:03 PM, Paul Durrant wrote: > The purpose if this ioctl is to allow a user of privcmd to restrict its > operation such that it will no longer service arbitrary hypercalls via > IOCTL_PRIVCMD_HYPERCALL, and will check for a matching domid when > servicing IOCTL_PRIVCMD_DM_OP. and IOCTL_PRIVCMD_MMAP*. > The aim of this is to limit the attack > surface for a compromised device model. -boris