XSMAsDefault TODO List

From Xen
Revision as of 18:30, 25 April 2016 by Konrad (talk | contribs) (→‎TODO List)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigationJump to search

What do we want to achieve

XSM with default policy will have:

  • Same functionality exposed to guests without regressions
  • Have at minimum the same security as we have without XSM enabled.
  • Have set of policies for device driver domains vs control domains.

Known Issues

  • Cannot re-apply a new policy after guests have been running.

TODO List

  • Could initial build of Xen hypervisor include a built-in (inside .init.data) policy file?
  • Can we make policies modularized? A core (perhaps built-in?) with amendments loaded later?
Retrieved from "https://wiki.xenproject.org/index.php?title=XSMAsDefault_TODO_List&oldid=16717"