On Fri, Jul 26, 2019 at 07:41:57AM -0400, Michael S. Tsirkin wrote:
> On Fri, Jul 26, 2019 at 10:53:38AM +0100, Stefan Hajnoczi wrote:
> > Describe how shared memory region ID 0 is the DAX window and how
> > FUSE_SETUPMAPPING maps file ranges into the window.
> >
> > Signed-off-by: Stefan Hajnoczi <>
> > ---
>
> Are there any security considerations with this memory sharing?
> If yes it might be a good idea to add a chapter about that,
> and functionality/performance/security tradeoffs involved.
I'll add statements about security. In light of recent security attacks
we should mention timing side-channel attacks, although the general
security model is that each virtio-fs client has full access to the
files in the shared directory and therefore a certain level of trust is
already required since race conditions and data corruption are possible
anyway.
Stefan
