xsm: Consolidate xsm processing within domain control hypercall.
authorKeir Fraser <keir.fraser@citrix.com>
Tue, 4 Dec 2007 10:25:35 +0000 (10:25 +0000)
committerKeir Fraser <keir.fraser@citrix.com>
Tue, 4 Dec 2007 10:25:35 +0000 (10:25 +0000)
commitbfe9b41712a920a4877556de5b922933eb3cbe40
tree9e6c7a363db8357f62385376e3788216e8a767eb
parent1f74affa2d43cebb224b1ef56a0a6abdbf822e65
xsm: Consolidate xsm processing within domain control hypercall.

Consolidate all the 15 xsm calls from within do_domctl a single
routine that is only called in one place, xsm_domctl:

int xsm_domctl (struct xen_domctl *domctl);

The parameter to domctl is a pointer to the xen_domctl structure that
contains a union of all sub operational parameters.

The benefits of this patch include:

(1) Easier to maintain because there is one place in the entire
hypercall to check with the xsm, instead of 15 or more.

(2) New sub-operations don't also need to add a corresponding xsm
    function.

(3) Removes 178 lines of code.

(4) Enhanced security because of 1-4.

Signed-off-by: Mike D. Day <ncmike@us.ibm.com>
xen/common/domctl.c
xen/include/xsm/xsm.h