Branch: refs/heads/next
  Home:   https://github.com/siemens/jailhouse
  Commit: 61f738d2740bb967f69565ff68a2e3329a4b869d
      
https://github.com/siemens/jailhouse/commit/61f738d2740bb967f69565ff68a2e3329a4b869d
  Author: Jan Kiszka <[email protected]>
  Date:   2017-08-25 (Fri, 25 Aug 2017)

  Changed paths:
    M Documentation/hypervisor-interfaces.txt
    M configs/e1000-demo.c
    M configs/ioapic-demo.c
    M configs/ivshmem-demo.c
    M configs/linux-x86-demo.c
    M configs/pci-demo.c
    M configs/smp-demo.c
    M configs/tiny-demo.c

  Log Message:
  -----------
  docs, configs: Make passive comm region read-only

Specify in the docs and implement in the configuration files that cells
with passive comm regions have only read access to it. This avoids that
a passive cell, i.e. one that should also not be able to prevent
configuration changes, can block them by declaring itself "running/
locked".

Instead of checking in the hypervisor that a cell config does not permit
writes to passive comm regions, we should eventually validate this
offline via a config checker.

Reported-by: Gustavo Lima Chaves <[email protected]>
Signed-off-by: Jan Kiszka <[email protected]>


-- 
You received this message because you are subscribed to the Google Groups 
"Jailhouse" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to