mirror of
https://github.com/xen-project/xen.git
synced 2026-10-28 18:21:39 +01:00
Daniel De Graaf
31689dcb0f
This makes it easier to enable or disable parts of the XSM policy. Signed-off-by: Daniel De Graaf <dgdegra@tycho.nsa.gov> Reviewed-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> Reviewed-by: Doug Goldstein <cardoe@cardoe.com>
14 lines
503 B
Plaintext
14 lines
503 B
Plaintext
# This is an alternative to nomigrate_t: a policy boolean controls the ability
|
|
# to create or migrate a domain of type prot_domU_t. If disabled, dom0 cannot
|
|
# map memory belonging to those domains.
|
|
gen_bool(prot_doms_locked, false)
|
|
declare_domain(prot_domU_t)
|
|
if (!prot_doms_locked) {
|
|
create_domain(dom0_t, prot_domU_t)
|
|
migrate_domain_out(dom0_t, prot_domU_t)
|
|
}
|
|
domain_comms(dom0_t, prot_domU_t)
|
|
domain_comms(domU_t, prot_domU_t)
|
|
domain_comms(prot_domU_t, prot_domU_t)
|
|
domain_self_comms(prot_domU_t)
|