allow hardware domain != dom0
authorDaniel De Graaf <dgdegra@tycho.nsa.gov>
Tue, 22 Apr 2014 10:10:13 +0000 (12:10 +0200)
committerJan Beulich <jbeulich@suse.com>
Tue, 22 Apr 2014 10:10:13 +0000 (12:10 +0200)
commit816f6224823320c8452fd3af5d873a2b82f5e1c3
tree6d3c4002d9c1e0b68cb28c9783d328a71d83e93f
parent4d21a95558b9c9007d8b70e63d1449a4a10f535c
allow hardware domain != dom0

This adds a hypervisor command line option "hardware_dom=" which takes a
domain ID.  When the domain with this ID is created, it will be used
as the hardware domain.

This is intended to be used when domain 0 is a dedicated stub domain for
domain building, allowing the hardware domain to be de-privileged and
act only as a driver domain.

Signed-off-by: Daniel De Graaf <dgdegra@tycho.nsa.gov>
Reviewed-by: Jan Beulich <jbeulich@suse.com>
docs/misc/xen-command-line.markdown
xen/arch/x86/domain_build.c
xen/common/domain.c
xen/common/rangeset.c
xen/include/xen/rangeset.h
xen/include/xen/sched.h
xen/include/xsm/dummy.h
xen/include/xsm/xsm.h
xen/xsm/dummy.c
xen/xsm/flask/hooks.c
xen/xsm/flask/policy/access_vectors