diff options
| author | Daniel De Graaf <dgdegra@tycho.nsa.gov> | 2012-02-02 15:25:23 +0000 |
|---|---|---|
| committer | Daniel De Graaf <dgdegra@tycho.nsa.gov> | 2012-02-02 15:25:23 +0000 |
| commit | 21149fb130a38cb7625191f79917f2190f6cccec (patch) | |
| tree | 8b821f58ef29cf38bf93a57ad7d401e5f98480ce /docs/misc/xsm-flask.txt | |
| parent | 9e68bb1b66aafd6434bd737da77760570a5cc5c2 (diff) | |
| download | xen-21149fb130a38cb7625191f79917f2190f6cccec.tar.gz xen-21149fb130a38cb7625191f79917f2190f6cccec.tar.bz2 xen-21149fb130a38cb7625191f79917f2190f6cccec.zip | |
flask/policy: Add boolean example
This shows an example boolean (prot_doms_locked) which can be set at
runtime to prevent dom0 from mapping memory of domains of type
prot_domU_t.
Signed-off-by: Daniel De Graaf <dgdegra@tycho.nsa.gov>
Committed-by: Keir Fraser <keir@xen.org>
Diffstat (limited to 'docs/misc/xsm-flask.txt')
| -rw-r--r-- | docs/misc/xsm-flask.txt | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/docs/misc/xsm-flask.txt b/docs/misc/xsm-flask.txt index 285bb9ff53..5b4297da85 100644 --- a/docs/misc/xsm-flask.txt +++ b/docs/misc/xsm-flask.txt @@ -55,10 +55,11 @@ kernel; it is normally placed either just above the dom0 kernel or at the end. Once dom0 is running, the policy can be reloaded using "xl loadpolicy". The example policy included with Xen demonstrates most of the features of FLASK -that can be used without dom0 disaggregation. It has two main types for domUs: +that can be used without dom0 disaggregation. The main types for domUs are: - domU_t is a domain that can communicate with any other domU_t - isolated_domU_t can only communicate with dom0 + - prot_domU_t is a domain type whose creation can be disabled with a boolean One disadvantage of using type enforcement to enforce isolation is that a new type is needed for each group of domains. In addition, it is not possible to |