Re: [Xen-devel] [PATCH v3] xenstore: remove XS_RESTRICT support

2017-02-07 Thread Wei Liu
On Tue, Feb 07, 2017 at 09:06:55AM +, David Scott wrote: > > > On 1 Feb 2017, at 14:49, Juergen Gross wrote: > > > > On 27/01/17 12:47, Juergen Gross wrote: > >> XS_RESTRICT and the xenstore library function xs_restrict() have never > >> been usable in all configurations

Re: [Xen-devel] [PATCH v3] xenstore: remove XS_RESTRICT support

2017-02-07 Thread David Scott
> On 1 Feb 2017, at 14:49, Juergen Gross wrote: > > On 27/01/17 12:47, Juergen Gross wrote: >> XS_RESTRICT and the xenstore library function xs_restrict() have never >> been usable in all configurations and there are no known users. >> >> This functionality was thought to

Re: [Xen-devel] [PATCH v3] xenstore: remove XS_RESTRICT support

2017-02-01 Thread Juergen Gross
On 27/01/17 12:47, Juergen Gross wrote: > XS_RESTRICT and the xenstore library function xs_restrict() have never > been usable in all configurations and there are no known users. > > This functionality was thought to limit access rights of device models > to xenstore in order to avoid affecting

Re: [Xen-devel] [PATCH v3] xenstore: remove XS_RESTRICT support

2017-01-27 Thread Wei Liu
On Fri, Jan 27, 2017 at 12:47:22PM +0100, Juergen Gross wrote: > XS_RESTRICT and the xenstore library function xs_restrict() have never > been usable in all configurations and there are no known users. > > This functionality was thought to limit access rights of device models > to xenstore in

[Xen-devel] [PATCH v3] xenstore: remove XS_RESTRICT support

2017-01-27 Thread Juergen Gross
XS_RESTRICT and the xenstore library function xs_restrict() have never been usable in all configurations and there are no known users. This functionality was thought to limit access rights of device models to xenstore in order to avoid affecting other domains in case of a security breech.