Difference between revisions of "XSMAsDefault TODO List"

From Xen
(Known Issues)
(TODO List)
Line 13: Line 13:
   
 
[[Category:Security]]
 
[[Category:Security]]
  +
  +
* Can we make policies modularized? A core (perhaps built-in?) with amendments loaded later?

Revision as of 18:29, 25 April 2016

What do we want to achieve

XSM with default policy will have:

  • Same functionality exposed to guests without regressions
  • Have at minimum the same security as we have without XSM enabled.
  • Have set of policies for device driver domains vs control domains.

Known Issues

  • Cannot re-apply a new policy after guests have been running.

TODO List

  • Can we make policies modularized? A core (perhaps built-in?) with amendments loaded later?