diff options
author | David Vrabel <david.vrabel@citrix.com> | 2013-10-14 10:23:10 +0200 |
---|---|---|
committer | Jan Beulich <jbeulich@suse.com> | 2013-10-14 10:23:10 +0200 |
commit | 8ec7763c807f252e930c9647a0631253db2844a7 (patch) | |
tree | e8704c43d653a4bfdab5e7b71a46930f2927d36c /xen/xsm/flask/hooks.c | |
parent | 88910061ec615b2d05e721a82c37139e05df0712 (diff) | |
download | xen-8ec7763c807f252e930c9647a0631253db2844a7.tar.gz xen-8ec7763c807f252e930c9647a0631253db2844a7.tar.bz2 xen-8ec7763c807f252e930c9647a0631253db2844a7.zip |
Add DOMCTL to limit the number of event channels a domain may use
Add XEN_DOMCTL_set_max_evtchn which may be used during domain creation to
set the maximum event channel port a domain may use. This may be used to
limit the amount of Xen resources (global mapping space and xenheap) that
a domain may use for event channels.
A domain that does not have a limit set may use all the event channels
supported by the event channel ABI in use.
Signed-off-by: David Vrabel <david.vrabel@citrix.com>
Reviewed-by: Jan Beulich <jbeulich@suse.com>
Acked-by: Daniel De Graaf <dgdegra@tycho.nsa.gov>
Acked-by: Keir Fraser <keir@xen.org>
Diffstat (limited to 'xen/xsm/flask/hooks.c')
-rw-r--r-- | xen/xsm/flask/hooks.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/xen/xsm/flask/hooks.c b/xen/xsm/flask/hooks.c index fa0589a2d7..b1e2593378 100644 --- a/xen/xsm/flask/hooks.c +++ b/xen/xsm/flask/hooks.c @@ -727,6 +727,9 @@ static int flask_domctl(struct domain *d, int cmd) case XEN_DOMCTL_audit_p2m: return current_has_perm(d, SECCLASS_HVM, HVM__AUDIT_P2M); + case XEN_DOMCTL_set_max_evtchn: + return current_has_perm(d, SECCLASS_DOMAIN2, DOMAIN2__SET_MAX_EVTCHN); + default: printk("flask_domctl: Unknown op %d\n", cmd); return -EPERM; |