kernel.git/include/uapi/xen/evtchn.h, branch linux-4.9.yHosts the 0x221E linux distro kernel.
https://git.0xinfinity.dev/distro/kernel.git/atom?h=linux-4.9.y2016-07-25T09:59:31Zxen/evtchn: add IOCTL_EVTCHN_RESTRICT2016-07-25T09:59:31ZDavid Vrabel2016-07-11T14:45:51Zurn:sha1:fbc872c38c8fed31948c85683b5326ee5ab9fccc
IOCTL_EVTCHN_RESTRICT limits the file descriptor to being able to bind
to interdomain event channels from a specific domain. Event channels
that are already bound continue to work for sending and receiving
notifications.
This is useful as part of deprivileging a user space PV backend or
device model (QEMU). e.g., Once the device model as bound to the
ioreq server event channels it can restrict the file handle so an
exploited DM cannot use it to create or bind to arbitrary event
channels.
Signed-off-by: David Vrabel <david.vrabel@citrix.com>
Reviewed-by: Boris Ostrovsky <boris.ostrovsky@oracle.com>
UAPI: (Scripted) Disintegrate include/xen2012-10-09T08:49:15ZDavid Howells2012-10-09T08:49:15Zurn:sha1:72503791edffe516848d0f01d377fa9cd0711970
Signed-off-by: David Howells <dhowells@redhat.com>
Acked-by: Arnd Bergmann <arnd@arndb.de>
Acked-by: Thomas Gleixner <tglx@linutronix.de>
Acked-by: Michael Kerrisk <mtk.manpages@gmail.com>
Acked-by: Paul E. McKenney <paulmck@linux.vnet.ibm.com>
Acked-by: Dave Jones <davej@redhat.com>