Difference between revisions of "XSMAsDefault TODO List"
From Xen
(→Known Issues) |
(→TODO List) |
||
Line 13: | Line 13: | ||
[[Category:Security]] |
[[Category:Security]] |
||
+ | |||
+ | * Can we make policies modularized? A core (perhaps built-in?) with amendments loaded later? |
Revision as of 18:29, 25 April 2016
What do we want to achieve
XSM with default policy will have:
- Same functionality exposed to guests without regressions
- Have at minimum the same security as we have without XSM enabled.
- Have set of policies for device driver domains vs control domains.
Known Issues
- Cannot re-apply a new policy after guests have been running.
TODO List
- Can we make policies modularized? A core (perhaps built-in?) with amendments loaded later?