public / x86: introduce __HYPERCALL_dm_op...
authorPaul Durrant <paul.durrant@citrix.com>
Wed, 25 Jan 2017 09:40:51 +0000 (10:40 +0100)
committerJan Beulich <jbeulich@suse.com>
Wed, 25 Jan 2017 09:40:51 +0000 (10:40 +0100)
commit524a98c2ac5e60b824033af32243bd4c8dd8e265
tree30f98410c8670ba7c9d9804c8a0a48b8300db4db
parent431685e8deb660976d8e986c41a647944e410c6c
public / x86: introduce __HYPERCALL_dm_op...

...as a set of hypercalls to be used by a device model.

As stated in the new docs/designs/dm_op.markdown:

"The aim of DMOP is to prevent a compromised device model from
compromising domains other then the one it is associated with. (And is
therefore likely already compromised)."

See that file for further information.

This patch simply adds the boilerplate for the hypercall.

Signed-off-by: Paul Durrant <paul.durrant@citrix.com>
Suggested-by: Ian Jackson <ian.jackson@citrix.com>
Suggested-by: Jennifer Herbert <jennifer.herbert@citrix.com>
Acked-by: Daniel De Graaf <dgdegra@tycho.nsa.gov>
Acked-by: Wei Liu <wei.liu2@citrix.com>
Reviewed-by: Andrew Cooper <andrew.cooper3@citrix.com>
Reviewed-by: Jan Beulich <jbeulich@suse.com>
17 files changed:
docs/designs/dmop.markdown [new file with mode: 0644]
tools/flask/policy/modules/xen.if
tools/libxc/include/xenctrl.h
tools/libxc/xc_private.c
tools/libxc/xc_private.h
xen/arch/x86/hvm/Makefile
xen/arch/x86/hvm/dm.c [new file with mode: 0644]
xen/arch/x86/hvm/hvm.c
xen/arch/x86/hypercall.c
xen/include/Makefile
xen/include/public/hvm/dm_op.h [new file with mode: 0644]
xen/include/public/xen.h
xen/include/xen/hypercall.h
xen/include/xlat.lst
xen/include/xsm/dummy.h
xen/include/xsm/xsm.h
xen/xsm/flask/hooks.c