Daniel De Graaf a31ed4edbe libxl: introduce XSM relabel on build ...

Allow a domain to be built under one security label and run using a
different label.  This can be used to prevent the domain builder or
control domain from having the ability to access a guest domain's memory
via map_foreign_range except during the build process where this is
required.

Example domain configuration snippet:
  seclabel='customer_1:vm_r:nomigrate_t'
  init_seclabel='customer_1:vm_r:nomigrate_t_building'

Note: this does not provide complete protection from a malicious dom0;
mappings created during the build process may persist after the relabel,
and could be used to indirectly access the guest's memory. However, if
dom0 correctly unmaps the domain upon building, a the domU is protected
against dom0 becoming malicious in the future.

Signed-off-by: Daniel De Graaf <dgdegra@tycho.nsa.gov>
acked-by: Ian Campbell <ian.campbell@citrix.com>
Committed-by: Ian Campbell <ian.campbell@citrix.com>

2012-12-13 11:44:02 +00:00

..

xend-config.sxp.pod.5

xend: Make hotplug script timeouts configurable

2009-05-19 02:18:48 +01:00

xl.cfg.pod.5

libxl: introduce XSM relabel on build

2012-12-13 11:44:02 +00:00

xl.conf.pod.5

xl: xl.conf(5): correct advice re autoballooning vs. dom0_mem.

2012-11-27 14:13:40 +00:00

xl.pod.1

libxl: add vtpm support

2012-11-13 10:46:59 +00:00

xlcpupool.cfg.pod.5

docs: Use lists.xen.org not lists.xensource.com

2012-06-28 16:11:59 +01:00

xm.pod.1

xend: Remove old vtpm support from xm

2012-11-19 12:59:48 +00:00

xmdomain.cfg.pod.5

docs: correct formatting errors in xmdomain.cfg

2012-09-10 11:13:55 +01:00