From mboxrd@z Thu Jan  1 00:00:00 1970
From: Paul Durrant <paul.durrant@citrix.com>
Subject: [PATCH v3 4/4] x86/hvm: add stricter permissions checks
 to ioreq server control plane
Date: Tue, 20 Mar 2018 18:05:25 +0000
Message-ID: <20180320180525.28605-5-paul.durrant@citrix.com>
References: <20180320180525.28605-1-paul.durrant@citrix.com>
Mime-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
Return-path: <xen-devel-bounces@lists.xenproject.org>
Received: from all-amaz-eas1.inumbo.com ([34.197.232.57])
 by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from
 <srs0=tcfy=gk=citrix.com=prvs=6108bc5fa=paul.durrant@srs-us1.protection.inumbo.net>)
 id 1eyLfI-0002OT-0a
 for xen-devel@lists.xenproject.org; Tue, 20 Mar 2018 18:07:16 +0000
In-Reply-To: <20180320180525.28605-1-paul.durrant@citrix.com>
List-Unsubscribe: <https://lists.xenproject.org/mailman/options/xen-devel>,
 <mailto:xen-devel-request@lists.xenproject.org?subject=unsubscribe>
List-Post: <mailto:xen-devel@lists.xenproject.org>
List-Help: <mailto:xen-devel-request@lists.xenproject.org?subject=help>
List-Subscribe: <https://lists.xenproject.org/mailman/listinfo/xen-devel>,
 <mailto:xen-devel-request@lists.xenproject.org?subject=subscribe>
Errors-To: xen-devel-bounces@lists.xenproject.org
Sender: "Xen-devel" <xen-devel-bounces@lists.xenproject.org>
To: xen-devel@lists.xenproject.org
Cc: Andrew Cooper <andrew.cooper3@citrix.com>, Paul Durrant <paul.durrant@citrix.com>
List-Id: xen-devel@lists.xenproject.org
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