All of lore.kernel.org
 help / color / mirror / Atom feed
* [PATCH 0/2] Adds starting the idle domain privileged
@ 2022-04-20 21:04 Daniel P. Smith
  2022-04-20 21:04 ` [PATCH 1/2] xsm: create idle domain privieged and demote after setup Daniel P. Smith
  2022-04-20 21:04 ` [PATCH 2/2] flask: implement xsm_transtion_running Daniel P. Smith
  0 siblings, 2 replies; 7+ messages in thread
From: Daniel P. Smith @ 2022-04-20 21:04 UTC (permalink / raw)
  To: xen-devel; +Cc: Daniel P. Smith, scott.davis, jandryuk

This series makes it so that the idle domain is started privileged under the
default policy, which the SILO policy inherits, and under the flask policy. It
then introduces a new one-way XSM hook, xsm_transition_running, that is hooked
by an XSM policy to transition the idle domain to its running privilege level.

Daniel P. Smith (2):
  xsm: create idle domain privieged and demote after setup
  flask: implement xsm_transtion_running

 tools/flask/policy/modules/xen.if      |  6 ++++++
 tools/flask/policy/modules/xen.te      |  1 +
 tools/flask/policy/policy/initial_sids |  1 +
 xen/arch/arm/setup.c                   |  6 ++++++
 xen/arch/x86/setup.c                   |  6 ++++++
 xen/common/sched/core.c                |  7 ++++++-
 xen/include/xsm/dummy.h                | 12 ++++++++++++
 xen/include/xsm/xsm.h                  |  6 ++++++
 xen/xsm/dummy.c                        |  1 +
 xen/xsm/flask/hooks.c                  | 21 ++++++++++++++++++++-
 xen/xsm/flask/policy/initial_sids      |  1 +
 11 files changed, 66 insertions(+), 2 deletions(-)

-- 
2.20.1



^ permalink raw reply	[flat|nested] 7+ messages in thread

end of thread, other threads:[~2022-04-20 19:52 UTC | newest]

Thread overview: 7+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2022-04-20 21:04 [PATCH 0/2] Adds starting the idle domain privileged Daniel P. Smith
2022-04-20 21:04 ` [PATCH 1/2] xsm: create idle domain privieged and demote after setup Daniel P. Smith
2022-04-20 18:31   ` Jason Andryuk
2022-04-20 19:24     ` Daniel P. Smith
2022-04-20 21:04 ` [PATCH 2/2] flask: implement xsm_transtion_running Daniel P. Smith
2022-04-20 18:07   ` Jason Andryuk
2022-04-20 19:51     ` Daniel P. Smith

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.