{"push_id":1240662027,"size":1,"distinct_size":1,"ref":"refs/heads/altp2m_external_only","head":"d50302f2017e7321cba92947d0a6c6cf92aff9c0","before":"7bde9f6b8a618671742feba5b82d31e7df83191e","commits":[{"sha":"d50302f2017e7321cba92947d0a6c6cf92aff9c0","author":{"name":"Tamas K Lengyel","email":"faed4ee514f93fc724f4025e7e2f21162ef3815f@zentific.com"},"message":"x86/altp2m: allow specifying external-only use-case\n\nCurrently setting altp2mhvm=1 in the domain configuration allows access to the\naltp2m interface for both in-guest and external privileged tools. This poses\na problem for use-cases where only external access should be allowed, requiring\nthe user to recompile Xen with XSM enabled to be able to appropriately restrict\naccess.\n\nIn this patch we deprecate the altp2mhvm domain configuration option and\nintroduce the altp2m option, which allows specifying if the altp2m interface\nshould be external-only. If this mode is selected, the default XSM check is\nshifted to use XSM_PRIV type check, thus restricting access to the interface\nby the guest itself.\n\nSigned-off-by: Tamas K Lengyel <tamas.lengyel@zentific.com>","distinct":true,"url":"https://api.github.com/repos/tklengyel/xen/commits/d50302f2017e7321cba92947d0a6c6cf92aff9c0"}]}
{"actor":{"display_login":"tklengyel"}}