1: x86/domctl: don't imply I/O port permissions from I/O port mapping 2: x86/HVM: more checking for XEN_DOMCTL_ioport_mapping Jan