All of lore.kernel.org
 help / color / mirror / Atom feed
From: "Jan Beulich" <JBeulich@suse.com>
To: Julien Grall <julien.grall@arm.com>,
	Stefano Stabellini <sstabellini@kernel.org>
Cc: "andrii_anisov@epam.com" <andrii_anisov@epam.com>,
	George Dunlap <George.Dunlap@eu.citrix.com>,
	Andrew Cooper <andrew.cooper3@citrix.com>,
	Ian Jackson <Ian.Jackson@eu.citrix.com>,
	george.dunlap@citrix.com, xen-devel@lists.xen.org,
	Dario Faggioli <dfaggioli@suse.com>
Subject: Re: [PATCH v7 12/12] xen: clarify the security-support status of Kconfig options on ARM
Date: Wed, 25 Jul 2018 03:11:06 -0600	[thread overview]
Message-ID: <5B583EAA02000078001D78EC@prv1-mh.provo.novell.com> (raw)
In-Reply-To: <8049223f-0f2c-45a7-ceb6-e067f4719bdd@arm.com>

>>> On 25.07.18 at 10:46, <julien.grall@arm.com> wrote:
> On 24/07/18 23:31, Stefano Stabellini wrote:
>> Yes, memaccess will default to enable. However, SUPPORT.md says it is
>> not security supported, hence, the result is that the .config is not
>> security supported, according to (3).
> 
> We really don't want that. That arm64_defconfig is the default config 
> for Xen. Anyone using it will not be security supported.
> 
> Distros will likely use the default config as it enables everything. If 
> I were a package maintainer, I would expect at minimum to security 
> support the .config. This does not mean that using a specific feature 
> will be supported.

Exactly - what the .config enables should not matter as long as the
enabled feature is not in use.

Jan



_______________________________________________
Xen-devel mailing list
Xen-devel@lists.xenproject.org
https://lists.xenproject.org/mailman/listinfo/xen-devel

      parent reply	other threads:[~2018-07-25  9:11 UTC|newest]

Thread overview: 42+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2018-07-06 23:12 [PATCH v7 00/12] arm: more kconfig configurability and small default configs Stefano Stabellini
2018-07-06 23:13 ` [PATCH v7 01/12] arm: remove the ARM HDLCD driver Stefano Stabellini
2018-07-06 23:13 ` [PATCH v7 02/12] arm: make it possible to disable HAS_GICV3 Stefano Stabellini
2018-07-06 23:13 ` [PATCH v7 03/12] arm: rename HAS_GICV3 to GICV3 Stefano Stabellini
2018-07-06 23:13 ` [PATCH v7 04/12] Make MEM_ACCESS configurable Stefano Stabellini
2018-07-06 23:13 ` [PATCH v7 05/12] make it possible to enable/disable UART drivers Stefano Stabellini
2018-07-06 23:13 ` [PATCH v7 06/12] arm: make it possible to disable the SMMU driver Stefano Stabellini
2018-07-06 23:13 ` [PATCH v7 07/12] arm: add a tiny kconfig configuration Stefano Stabellini
2018-07-23 11:17   ` Julien Grall
2018-07-06 23:13 ` [PATCH v7 08/12] arm: add ALL, QEMU, Rcar3 and MPSoC configs Stefano Stabellini
2018-07-23 11:24   ` Julien Grall
2018-07-24 22:08     ` Stefano Stabellini
2018-07-24 13:27   ` Andrii Anisov
2018-07-26 22:46     ` Stefano Stabellini
2018-07-27 10:30       ` Andrii Anisov
2018-07-27 11:20         ` Julien Grall
2018-07-27 11:21         ` Andrii Anisov
2018-07-27 11:27           ` Julien Grall
2018-07-27 11:34             ` Andrii Anisov
2018-07-27 11:39               ` Julien Grall
2018-07-27 17:11         ` Stefano Stabellini
2018-07-27 18:23           ` Andrii Anisov
2018-07-27 21:35             ` Stefano Stabellini
2018-07-27 22:09               ` Julien Grall
2018-07-27 23:30                 ` Stefano Stabellini
2018-07-30 10:34                   ` Julien Grall
2018-07-30 17:39                     ` Stefano Stabellini
2018-07-30 16:11               ` Andrii Anisov
2018-07-06 23:14 ` [PATCH v7 09/12] xen: add per-platform defaults for NR_CPUS Stefano Stabellini
2018-07-23 11:26   ` Julien Grall
2018-07-06 23:14 ` [PATCH v7 10/12] xen: add cloc target Stefano Stabellini
2018-07-06 23:14 ` [PATCH v7 11/12] xen: specify support for EXPERT and DEBUG Kconfig options Stefano Stabellini
2018-07-16 12:50   ` Jan Beulich
2018-07-06 23:14 ` [PATCH v7 12/12] xen: clarify the security-support status of Kconfig options on ARM Stefano Stabellini
2018-07-23 11:37   ` Julien Grall
2018-07-24 22:31     ` Stefano Stabellini
2018-07-25  8:46       ` Julien Grall
2018-07-25  8:59         ` Andrew Cooper
2018-07-25  9:50           ` Julien Grall
2018-07-25 11:09             ` George Dunlap
2018-07-26  0:40               ` Stefano Stabellini
2018-07-25  9:11         ` Jan Beulich [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=5B583EAA02000078001D78EC@prv1-mh.provo.novell.com \
    --to=jbeulich@suse.com \
    --cc=George.Dunlap@eu.citrix.com \
    --cc=Ian.Jackson@eu.citrix.com \
    --cc=andrew.cooper3@citrix.com \
    --cc=andrii_anisov@epam.com \
    --cc=dfaggioli@suse.com \
    --cc=george.dunlap@citrix.com \
    --cc=julien.grall@arm.com \
    --cc=sstabellini@kernel.org \
    --cc=xen-devel@lists.xen.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.