From nobody Thu Sep 24 19:44:09 2026 Delivered-To: importer@patchew.org Received-SPF: pass (zohomail.com: domain of lists.xenproject.org designates 192.237.175.120 as permitted sender) client-ip=192.237.175.120; envelope-from=xen-devel-bounces@lists.xenproject.org; helo=lists.xenproject.org; Authentication-Results: mx.zohomail.com; dkim=pass; spf=pass (zohomail.com: domain of lists.xenproject.org designates 192.237.175.120 as permitted sender) smtp.mailfrom=xen-devel-bounces@lists.xenproject.org; arc=pass (i=1 dmarc=pass fromdomain=epam.com); dmarc=pass(p=quarantine dis=none) header.from=epam.com ARC-Seal: i=2; a=rsa-sha256; t=1788944269; cv=pass; d=zohomail.com; s=zohoarc; b=k+lqFaOIhs3ogQ2OMEaMPPWHaHMthyL6NktbJx+48HyRQY6KvWfvKVmTg4Tzp+AOWiwk7sUAgToatRzdPEtzoa9DWn3MtoQeyOQw7Hj3bCWkF3jxBsHLw1jDKEPJde3GW4W6KrT6yJy2pC5fqqQCL5AKysm0ZOcf+CbE4DoPgKk= ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=zohomail.com; s=zohoarc; t=1788944269; h=Content-ID:Content-Type:Content-Transfer-Encoding:Cc:Cc:Date:Date:From:From:List-Subscribe:List-Post:List-Id:List-Help:List-Unsubscribe:MIME-Version:Message-ID:Sender:Subject:Subject:To:To:Message-Id:Reply-To; bh=pO75MlVDe0nMYZAvzFeDEUNClrnEUOmHUJcaSb/LUBU=; b=CvKtk5o/Jy9eKJWP38c3O3l9r4Vko8MVpInAiOvDwqmGm3IXCFzgJ1YqN+vmYX2XjCjCPjmmirXaeNgjRUm8BFmYcfkX50KmY35snKhgL27BKMWBUTz186uUC7B//rFSvc4AMXNhanrCGix0B/Vp9fbYWwyTW3kAQ8FbfOQ2sNc= ARC-Authentication-Results: i=2; mx.zohomail.com; dkim=pass; spf=pass (zohomail.com: domain of lists.xenproject.org designates 192.237.175.120 as permitted sender) smtp.mailfrom=xen-devel-bounces@lists.xenproject.org; arc=pass (i=1 dmarc=pass fromdomain=epam.com); dmarc=pass header.from= (p=quarantine dis=none) Return-Path: Received: from lists.xenproject.org (lists.xenproject.org [192.237.175.120]) by mx.zohomail.com with SMTPS id 1788944269358849.6028412080428; Wed, 9 Sep 2026 01:57:49 -0700 (PDT) Received: from list by lists.xenproject.org with outflank-mailman.1412685.1643060 (Exim 4.92) (envelope-from ) id 1x4E7K-00023N-C4; Wed, 09 Sep 2026 08:57:18 +0000 Received: by outflank-mailman (output) from mailman id 1412685.1643060; Wed, 09 Sep 2026 08:57:18 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1x4E7K-00023F-9E; Wed, 09 Sep 2026 08:57:18 +0000 Received: by outflank-mailman (input) for mailman id 1412685; Wed, 09 Sep 2026 08:57:16 +0000 Received: from mx.expurgate.net ([194.145.224.10]) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1x4E7I-000239-Cf for xen-devel@lists.xenproject.org; Wed, 09 Sep 2026 08:57:16 +0000 Received: from mx.expurgate.net (helo=localhost) by mx.expurgate.net with esmtp id 1x4E7H-00CgMy-PU for xen-devel@lists.xenproject.org; Wed, 09 Sep 2026 10:57:15 +0200 Received: from [10.42.69.6] (helo=localhost) by localhost with ESMTP (eXpurgate MTA 0.9.1) (envelope-from ) id 6aa11f5c-2eae-0a2a0a5409dd-0a2a45068c28-28 for ; Wed, 09 Sep 2026 10:57:15 +0200 Received: from [52.101.69.118] (helo=AM0PR83CU005.outbound.protection.outlook.com) by tlsNG-16d1c6.mxtls.expurgate.net with ESMTPS (eXpurgate 4.57.1) (envelope-from ) id 6aa11f6b-195a-0a2a45060019-346545765b56-3 for ; Wed, 09 Sep 2026 10:57:15 +0200 Received: from AS8PR03MB9192.eurprd03.prod.outlook.com (2603:10a6:20b:5c0::11) by GVUPR03MB11305.eurprd03.prod.outlook.com (2603:10a6:150:33d::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.406.8; Wed, 9 Sep 2026 08:57:09 +0000 Received: from AS8PR03MB9192.eurprd03.prod.outlook.com ([fe80::61a0:97f5:ac5f:e292]) by AS8PR03MB9192.eurprd03.prod.outlook.com ([fe80::61a0:97f5:ac5f:e292%7]) with mapi id 15.21.0406.005; Wed, 9 Sep 2026 08:57:09 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version X-BeenThere: xen-devel@lists.xenproject.org List-Id: Xen developer discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-devel-bounces@lists.xenproject.org Precedence: list Sender: "Xen-devel" Authentication-Results: eu.smtp.expurgate.cloud; dkim=pass header.s=selector1 header.d=epam.com header.i="@epam.com" header.h="From:Date:Subject:Message-ID:Content-Type:MIME-Version:x-ms-exchange-senderadcheck" ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=ke7BL2N39ZhKYS1uILv/wr9/0Fy7mzYmKYczeqWsKFBHtdTa8UmgCzpdQaTMHhsLjhCuem/vMVvaWKih7pu7uw8Zk67T+xisKURPNOAmhbftvIJOnrOgX2JXVA/smm/iwDetb5EX4VZWau1SnCHE/8iRx4tjq6H51aHxeDwuFd0OnmDDhkLV+KbKdeQ5rBeW43uU1vh5t7Wvl5OOZHODC3kU6yhoVVFnqPfWUH5wR3ndwMvzn9F+7MB8JdmjlFOuzw45pqdmSwS9Bb/+R565ALkxtpOqU/WKRNlcPpluxOWx7Li/4P5LlOUx7o+l495OcaI+pLWqSxA8lAA6kDcycA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=pO75MlVDe0nMYZAvzFeDEUNClrnEUOmHUJcaSb/LUBU=; b=fODwZGr3GD1aBpxotbuYLQs1kak3n6rwsyeU/AawD/3p/pRSCuz5HPrMMgsMXvIWlinO5FrjzR9PWhkE7LK6cWXjO40xHSdScKP19+HdLdkaZk490DfcKWwTmGZ72o1pkjvHlV+XvwSo7BEhBIXPBCDXUUt8MZtqVp3hZU3BoEAIroa6wmudO2WmTFIrz7MM8Bu34Vx+e5/1mSiOLKjBcY4VYjzVdCAOqA+Dx17UwLTEExQQ+9umakK7TnvgwFoJTxoQ8B6eTHkGDWtoBOog20VYSjXgdVaRRXdrugsz+K/vNP2SM9avTFcVxnl59tPN2Y3QFT55iDkXGyBBD/JaAA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=epam.com; dmarc=pass action=none header.from=epam.com; dkim=pass header.d=epam.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=epam.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=pO75MlVDe0nMYZAvzFeDEUNClrnEUOmHUJcaSb/LUBU=; b=CP3zOy1wp/9pHUkPVwTH4DqxysZ/gjIRsFeBV108wCj6qInx9S6W44lYnHHTaoDu0GsfrhM3iyBBxfYPI2nfwkPlIgrHn6VoJdAcOd1+8e8UpvEup9S0zpFjYiVoyOZz5zSnpdi0rH8nooT8jng0bL8DywPBIdf/iAmN5cVkywfTLPM03tXqP6upnZSEixhdaT6KSFsnB5e1zgL3SBvjFy7Cfya3RZZIqYrcr6drCb8Kas2qUzUSJ+OwyPXWYynbb6RLNG9yeGWWU0wTt1tGiz9Em/mk+icKQGD+tWlsOaSf6loQX4oPbU00Kkpcr/5Uitv6ihG0pO2+7/5Ft6Gj5g== From: Sergiy Kibrik To: "xen-devel@lists.xenproject.org" CC: Sergiy Kibrik , Stefano Stabellini , Julien Grall , Bertrand Marquis , Michal Orzel , Volodymyr Babchuk , "Daniel P. Smith" , Andrew Cooper Subject: [PATCH v2] common: dom0less-bindings: introduce XSM labels Thread-Topic: [PATCH v2] common: dom0less-bindings: introduce XSM labels Thread-Index: AQHdQDkyagFQfWFtmkmXmxebnPrTEg== Date: Wed, 9 Sep 2026 08:57:09 +0000 Message-ID: <20260909085707.2359322-1-Sergiy_Kibrik@epam.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=epam.com; x-ms-publictraffictype: Email x-ms-traffictypediagnostic: AS8PR03MB9192:EE_|GVUPR03MB11305:EE_ x-ms-office365-filtering-correlation-id: f0a1711e-8c55-46c6-a376-08df0e5054d1 x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0;ARA:13230040|23010399003|1800799024|376014|366016|10067099003|6133799003|18002099003|11063799006|56012099006|38070700021; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AS8PR03MB9192.eurprd03.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(23010399003)(1800799024)(376014)(366016)(10067099003)(6133799003)(18002099003)(11063799006)(56012099006)(38070700021);DIR:OUT;SFP:1102; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?utf-8?B?UjlxT09sd3VCSVBiRDcvOWxiMUZwRVBZZlRFTHk3QUtFbU5PK2NsajF1MXNm?= =?utf-8?B?eGovN0k2MEZJNTNPRGh4eEs1RFJyQjl5Wkp4TXBHYi91S3cyY0RPL1RKNFc2?= =?utf-8?B?Skd5Skp5MS9ZTVlWcmo3ZitObjF5YmdnWGNLRWFwQlNIY21pbU1wZEJuNGFD?= =?utf-8?B?bFNaV2NZQ0FYUHpCSm52cm9uWjBwZ2ltejdFclBrcE93ZnZWMW9sQXMwUncx?= =?utf-8?B?K2wrU0pqcUl4UEkrcHgrNGd2N0JodFBOOVlvQXk0QmFQNS93c3JBU1l1WVhl?= =?utf-8?B?dWpZWnhjSnFqMlh3UWJuanl0eksxZkhKemx5VnN0UHdZNEZNNTNkZHhnMHh2?= =?utf-8?B?dnh4YVJjL2JWOWs3Yitudy9JLzZpQ0xyaVZCaSsrcXI2T1Urc1FQZmJBSlBh?= =?utf-8?B?eHJGaHZ1L0xUQnZYYTNWbHpmV2Z0RmRIcTk4SW8vdUhUWllmbk1yajl5Szgv?= =?utf-8?B?V29MTjIrNE1TQ2NSRjlicVQ4QTNidUFLcFBUQUFyKzZWTkl5NVNnTmVZNkVZ?= =?utf-8?B?OE56eEhZdjQ1VXlQd1FVbk1pYXdGeE1jTy9NRkNYUllRSlZxMHB2ZDdDREsr?= =?utf-8?B?dGdCell3YWt5enZYM3hhOGFqMW10VTBwdFVSYXpxWFRTRE9QRERXZk5lbFlS?= =?utf-8?B?NXVOL3p5TzhqaWZSUCs0YzBXZnJXMUJJVE5OUEdYbCtMSmdESDRyMDV2RlIx?= =?utf-8?B?aG56eENTMExQQjNSWml1U3gzRWdZSWs5MUJPeTFuN050TEVEbG1sNTNlbWln?= =?utf-8?B?MWtMKzAvV0g0Y0pNV1BZN25aMTdLMkVnM1k4TC9yYmVBbHoxTDI4NThDeVJE?= =?utf-8?B?YXlnN1k2NUFZZkZBQ0h3VGl3MGNqK083ZExlcklCSVNaNlEvK3FhcHU0U3hL?= =?utf-8?B?THpNT2VmM3F6VkJBZm80RGdaRjU3UTJGQUlEZDJBU2NCYmFzMm41cUZJNjJr?= =?utf-8?B?S2dUUUxtby9sbEZWNitveUhDQjV5Snk5K0ltR1NsUy9wQ29GNGZrWWVqOU43?= =?utf-8?B?SmJkWi9ZTzd2cUltZUNMWW1oQ09CMHdvVkI1UzlQUEZWY0ZteEVPWlBiNUxw?= =?utf-8?B?STFibnVZK0ljalpCdzJUK2JVYTlsdklBOUFVQ3Q2ajFVZVRCSXQ1czQwT3ZC?= =?utf-8?B?TjZnVktuS25YalQ2MFBHNUVSOTZ5NFg0bUtRQ1hQSlI3bGZOK0EyTkphYlM2?= =?utf-8?B?ZDM0VEh3WWtQSzNUNVNEanJweURqcWI5WnA2NTdDRVhMOXNkZ3hGbmFaUHI0?= =?utf-8?B?bVFZRmd3RjhGWDdaUUhNN3JlUDdaS21acHNMVXB4VDJMTndvWVI2aVNPYTFN?= =?utf-8?B?RW1jL1VhVFJWTHV6SWR2TkduN0JZQ0hQTXp2WHpIVXV6MmFsSU5nbk9LSWtT?= =?utf-8?B?bm81cGMrSGxiYnlLSDNxVStjVG1RN1RwUkhrcEc0dzl2eXU2RzJ3Q1ZMbTdO?= =?utf-8?B?eGFObGEveStCZHVBWW5zTGh4YnlUZ1lUYkcyczlVdG5hWDZUL2ZkWEdwNG9I?= =?utf-8?B?ektyclNkLzIza1VYai9JYXNRZ2ZTbk1uSmJDaVZER3BOK1dBeG1GWmlsdDN5?= =?utf-8?B?VDFUQ1JSK3lMY0F0U0s4RDBtUGVsQ1ZFUWkvUWVjYnpPWnRlZjlVY0IxS1R1?= =?utf-8?B?a3VoVERvSkpVd2d5VG9jSWVBcWc2K2laeHp4UDdwaTJwVXdSd0JsZ1p5bzAw?= =?utf-8?B?ZDdiZXJmQkp0NWR0ZnpHQTZPdEczVWx4dG5waFlaVTRjcTVTNnYreXBsaHBI?= =?utf-8?B?NjhrMzBoZTlVQk9PMDdXcGJFYkxsZGtMUk16dCtlMUxwUlhhY1huK3NnY0N0?= =?utf-8?B?ZDFzODNBVXg5dGQ3Z1piaXdMY3piMENMelduQktjbXFyOXVSR0NJaXplSEgr?= =?utf-8?B?S2xZd3EzVXdXOUhmVExnVTBMZTZlaHNmdVdrZDBuemU1dXg3M1hVMmNBek5o?= =?utf-8?B?YnE4ekxIZndMZElrTDlpblpSTjY5WFVCcEFGc3pRT0hOanVkOTlJWDdnekVo?= =?utf-8?B?NEx3am5BQ0pHaTF3dVMyZk03Q2lPYy96TUtnK2VqcXNJSnhiNkY2VVZjUGt1?= =?utf-8?B?d25XVlRRaVRldkxVRlNqL0g5SmpWaDUxTzFCRWRtOE1uU05PYWJlNEJ2SFRW?= =?utf-8?B?S3NQdmdna0s4MjNlb3Fsa3BDZG1uRGtnbVp1Z2hoV3pmOCtxWFBhRHBlY0FW?= =?utf-8?B?MmJxdzFOM0c2eG5yb1pyeXJQUTZlUjczN1FUN1dXKzFRMDNQNHFodTdRMHFr?= =?utf-8?B?bkkvd05CMFNMYnRFL3FsVmZHS0pYajlBczU5VGYyb2w5L2hFUWNESHhubVQw?= =?utf-8?B?VVhjV0lOa3lLZUttQThLK0I1enFRTDNxdU5yYnVoRkppV2t5d1dCRXhGeWF3?= =?utf-8?Q?lmMYawhLq8+orLH0=3D?= Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: epam.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: AS8PR03MB9192.eurprd03.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: f0a1711e-8c55-46c6-a376-08df0e5054d1 X-MS-Exchange-CrossTenant-originalarrivaltime: 09 Sep 2026 08:57:09.2968 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: b41b72d0-4e9f-4c26-8a69-f949f367c91d X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: yyDwndxF2nl2oz4iPVhc9jWJL7JW2cKwF9hHIpLGvj16X5uQ86UxWSCM+hznSTbhR31kk5c94SJllbT8aZ+GNw== X-MS-Exchange-Transport-CrossTenantHeadersStamped: GVUPR03MB11305 X-purgate-ID: tlsNG-16d1c6/1788944235-F7CCD77B-003003ED/0/0 X-purgate-type: clean X-purgate-size: 6142 X-ZohoMail-DKIM: pass (identity @epam.com) X-ZM-MESSAGEID: 1788944272529158500 Add "seclabel" property to be able to specify security label for a domain when XSM Flask is enabled, similar to xl configuration files. Currently guest domain can't be created by Xen in dom0less configuration wh= en Flask is enabled, as domain is assigned "system_u:system_r:unlabeled_t" lab= el by default, which Flask denies to create according to current policy. Because code from outside of flask can't directly execute its internal API a new routine flask_context_to_sid() introduced as part of XSM API exposed to rest of Xen, which is a direct wrapper for security_context_to_sid(). Signed-off-by: Sergiy Kibrik CC: Daniel P. Smith CC: Andrew Cooper --- changes in v2: - add & use flask_context_to_sid() wrapper --- docs/misc/arm/device-tree/booting.txt | 8 ++++++++ xen/common/device-tree/dom0less-bindings.c | 11 +++++++++++ xen/include/xsm/xsm.h | 3 +++ xen/xsm/flask/hooks.c | 5 +++++ 4 files changed, 27 insertions(+) diff --git a/docs/misc/arm/device-tree/booting.txt b/docs/misc/arm/device-t= ree/booting.txt index bcb06bc796..fcc7be0ffb 100644 --- a/docs/misc/arm/device-tree/booting.txt +++ b/docs/misc/arm/device-tree/booting.txt @@ -345,6 +345,12 @@ with the following properties: not passed. This configuration requires static allocation (xen,static-= mem) and direct mapping (direct-map). =20 +- seclabel + + A string property specifying an XSM security label to this domain. Eff= ective + only when FLASK is enabled. Domains will be classified =E2=80=9Cunlabe= led=E2=80=9D if + this property not specified. + Under the "xen,domain" compatible node, one or more sub-nodes are present for the DomU kernel and ramdisk. =20 @@ -422,6 +428,7 @@ chosen { memory =3D <0 131072>; cpus =3D <2>; vpl011; + seclabel =3D "system_u:system_r:domU_t"; =20 vcpu0 { compatible =3D "xen,vcpu"; @@ -453,6 +460,7 @@ chosen { #size-cells =3D <0x1>; memory =3D <0 65536>; cpus =3D <1>; + seclabel =3D "system_u:system_r:domU_t"; =20 module@0x4c000000 { compatible =3D "multiboot,kernel", "multiboot,module"; diff --git a/xen/common/device-tree/dom0less-bindings.c b/xen/common/device= -tree/dom0less-bindings.c index 41d72d0d58..0b0ed6e25d 100644 --- a/xen/common/device-tree/dom0less-bindings.c +++ b/xen/common/device-tree/dom0less-bindings.c @@ -11,6 +11,8 @@ #include #include =20 +#include + int __init parse_dom0less_node(struct dt_device_node *node, struct boot_domain *bd) { @@ -21,6 +23,7 @@ int __init parse_dom0less_node(struct dt_device_node *nod= e, bool has_dtb =3D false; bool iommu =3D false; const char *dom0less_iommu =3D NULL; + const char *xsm_seclabel =3D NULL; =20 if ( !dt_device_is_compatible(node, "xen,domain") ) return -ENOENT; @@ -141,5 +144,13 @@ int __init parse_dom0less_node(struct dt_device_node *= node, panic("'llc-colors' found, but LLC coloring is disabled\n"); #endif =20 + if ( IS_ENABLED(CONFIG_XSM_FLASK) && + !dt_property_read_string(node, "seclabel", &xsm_seclabel) ) + { + if ( flask_context_to_sid(xsm_seclabel, strlen(xsm_seclabel), + &d_cfg->ssidref) ) + panic("Invalid security context for domain: %s\n", xsm_seclabe= l); + } + return arch_parse_dom0less_node(node, bd); } diff --git a/xen/include/xsm/xsm.h b/xen/include/xsm/xsm.h index 9809e005e0..73d058a8b2 100644 --- a/xen/include/xsm/xsm.h +++ b/xen/include/xsm/xsm.h @@ -261,4 +261,7 @@ static inline bool has_xsm_magic(paddr_t start) =20 #endif /* CONFIG_XSM */ =20 +int flask_context_to_sid(const char *scontext, + uint32_t scontext_len, uint32_t *sid); + #endif /* __XSM_H */ diff --git a/xen/xsm/flask/hooks.c b/xen/xsm/flask/hooks.c index 902857415b..9b10784acb 100644 --- a/xen/xsm/flask/hooks.c +++ b/xen/xsm/flask/hooks.c @@ -2014,6 +2014,11 @@ const struct xsm_ops *__init flask_init( return &flask_ops; } =20 +int flask_context_to_sid(const char *scontext, uint32_t scontext_len, uint= 32_t *sid) +{ + return security_context_to_sid(scontext, scontext_len, sid); +} + /* * Local variables: * mode: C --=20 2.43.0