x86/domctl: Implement XEN_DOMCTL_get_cpu_policy
authorSergey Dyasli <sergey.dyasli@citrix.com>
Thu, 21 Jun 2018 14:35:50 +0000 (16:35 +0200)
committerAndrew Cooper <andrew.cooper3@citrix.com>
Tue, 6 Nov 2018 17:51:18 +0000 (17:51 +0000)
commit60529dfeca145a8ec00f5813a4c7179f0c1bfb97
treef59ec0459f52ad1818fb1564d2cdcb80f5d4572f
parent6b85e427098cce1a6d386b3bae2f0c7ce86e47f7
x86/domctl: Implement XEN_DOMCTL_get_cpu_policy

This finally (after literally years of work!) marks the point where the
toolstack can ask the hypervisor for the current CPUID configuration of a
specific domain.

Introduce a new flask access vector and update the default policies.

Also extend xen-cpuid's --policy mode to be able to take a domid and dump a
specific domains CPUID and MSR policy.

Signed-off-by: Andrew Cooper <andrew.cooper3@citrix.com>
Signed-off-by: Sergey Dyasli <sergey.dyasli@citrix.com>
Acked-by: Daniel De Graaf <dgdegra@tycho.nsa.gov>
Reviewed-by: Jan Beulich <jbeulich@suse.com>
Acked-by: Wei Liu <wei.liu2@citrix.com>
tools/flask/policy/modules/dom0.te
tools/flask/policy/modules/xen.if
tools/libxc/include/xenctrl.h
tools/libxc/xc_cpuid_x86.c
tools/misc/xen-cpuid.c
xen/arch/x86/domctl.c
xen/include/public/domctl.h
xen/xsm/flask/hooks.c
xen/xsm/flask/policy/access_vectors