mirror of
https://github.com/xen-project/xen.git
synced 2026-10-28 02:01:24 +01:00
Wei Liu
c492e19fdd
This patch removes all tmem related code and CONFIG_TMEM from the hypervisor. Also remove tmem hypercalls from the default XSM policy. It is written as if tmem is disabled and tmem freeable pages is 0. We will need to keep public/tmem.h around forever to avoid breaking guests. Remove the hypervisor only part and put guest visible part under a xen version check. Take the chance to remove trailing whitespaces. Signed-off-by: Wei Liu <wei.liu2@citrix.com> Acked-by: Jan Beulich <jbeulich@suse.com> Acked-by: Daniel De Graaf <dgdegra@tycho.nsa.gov> Acked-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> Acked-by: Ian Jackson <ian.jackson@eu.citrix.com>
36 lines
1.5 KiB
Plaintext
36 lines
1.5 KiB
Plaintext
# Allow all domains to use PMU (but not to change its settings --- that's what
|
|
# pmu_ctrl is for)
|
|
allow domain_type xen_t:xen2 pmu_use;
|
|
|
|
# Allow all domains to enable the Argo interdomain communication hypercall;
|
|
# to register single-sender (unicast) rings to partner with any domain;
|
|
# to register any-sender (wildcard) rings that can be sent to by any domain;
|
|
# and send messages to rings.
|
|
allow domain_type xen_t:argo { enable register_any_source };
|
|
allow domain_type domain_type:argo { send register_single_source };
|
|
|
|
# Allow guest console output to the serial console. This is used by PV Linux
|
|
# and stub domains for early boot output, so don't audit even when we deny it.
|
|
# Without XSM, this is enabled only if the Xen was compiled in debug mode.
|
|
gen_bool(guest_writeconsole, true)
|
|
if (guest_writeconsole) {
|
|
allow domain_type xen_t : xen writeconsole;
|
|
} else {
|
|
dontaudit domain_type xen_t : xen writeconsole;
|
|
}
|
|
|
|
# For normal guests, allow all queries except XENVER_commandline.
|
|
allow domain_type xen_t:version {
|
|
xen_extraversion xen_compile_info xen_capabilities
|
|
xen_changeset xen_pagesize xen_guest_handle
|
|
};
|
|
|
|
# Version queries don't need auditing when denied. They can be
|
|
# encountered in normal operation by xl or by reading sysfs files in
|
|
# Linux, so without this they will show up in the logs. Since these
|
|
# operations return valid responses (like "denied"), hiding the denials
|
|
# should not break anything.
|
|
dontaudit domain_type xen_t:version {
|
|
xen_commandline xen_build_id
|
|
};
|