projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: ab520be) | patch
xen/privcmd: add IOCTL_PRIVCMD_RESTRICT
authorPaul Durrant <paul.durrant@citrix.com>
Mon, 13 Feb 2017 17:03:24 +0000 (17:03 +0000)
committerBoris Ostrovsky <boris.ostrovsky@oracle.com>
Tue, 14 Feb 2017 20:14:59 +0000 (15:14 -0500)
commit4610d240d691768203fdd210a5da0a2e02eddb76
treeb3f34882aa7607ac00f2184df88a307f96377798tree | snapshot
parentab520be8cd5d56867fc95cfbc34b90880faf1f9dcommit | diff
xen/privcmd: add IOCTL_PRIVCMD_RESTRICT

The purpose if this ioctl is to allow a user of privcmd to restrict its
operation such that it will no longer service arbitrary hypercalls via
IOCTL_PRIVCMD_HYPERCALL, and will check for a matching domid when
servicing IOCTL_PRIVCMD_DM_OP or IOCTL_PRIVCMD_MMAP*. The aim of this
is to limit the attack surface for a compromised device model.

Signed-off-by: Paul Durrant <paul.durrant@citrix.com>
Signed-off-by: Boris Ostrovsky <boris.ostrovsky@oracle.com>
drivers/xen/privcmd.c diff | blob | history
include/uapi/xen/privcmd.h diff | blob | history
ep93xx device tree rework repo: git://git.maquefel.me/linux.git