Alexandru Isaila 3fd3e9303e x86/altp2m: hypercall to set altp2m view visibility ...

At this moment a guest can call vmfunc to change the altp2m view. This
should be limited in order to avoid any unwanted view switch.

The new xc_altp2m_set_visibility() solves this by making views invisible
to vmfunc.
This is done by having a separate arch.altp2m_working_eptp that is
populated and made invalid in the same places as altp2m_eptp. This is
written to EPTP_LIST_ADDR.
The views are made in/visible by marking them with INVALID_MFN or
copying them back from altp2m_eptp.
To have consistency the visibility also applies to
p2m_switch_domain_altp2m_by_id().

The usage of this hypercall is aimed at dom0 having a logic with a number of views
created and at some time there is a need to be sure that only some of the views
can be switched, saving the rest and making them visible when the time
is right.

Note: If altp2m mode is set to mixed the guest is able to change the view
visibility and then call vmfunc.

Signed-off-by: Alexandru Isaila <aisaila@bitdefender.com>
Reviewed-by: Jan Beulich <jbeulich@suse.com>
Reviewed-by: Kevin Tian <kevin.tian@intel.com>
Acked-by: Wei Liu <wl@xen.org>

2020-04-14 11:38:48 +02:00

..

xc_dom.h

tools/dombuilder: Don't allocate dom->p2m_host[] for translated domains

2020-01-07 12:46:03 +00:00

xenctrl_compat.h

x86/domctl: remove XEN_DOMCTL_pin_mem_cacheattr

2018-01-25 12:26:55 +01:00

xenctrl.h

x86/altp2m: hypercall to set altp2m view visibility

2020-04-14 11:38:48 +02:00

xenguest.h

tools/migration: Formatting and style cleanup

2020-01-16 15:16:42 +00:00