CVS log for src/sys/arch/xen/xen/privcmd.c

Up to [cvs.NetBSD.org] / src / sys / arch / xen / xen

Request diff between arbitrary revisions

Keyword substitution: kv
Default branch: MAIN

Redo previous; kill the right printf()

Remove a noisy printf; HVM guests triggers it (a lot) and it seems to be
expected.

Adjust privcmd_notify() so it has a chance to work in a PVH environnement too.

If we check XENPV, make sure to #include "opt_xen.h"

Work in progress on dom0 PVH support: ioctl support for tools.
Basically, in PVH mode (where XENFEAT_auto_translated_physmap is enabled),
the hypervisor will not map foreing ressources in our virtual address
space for us. Instead, we have to pass it an address in our physical
address space (but not mapped to some RAM) where the ressource will show up
and then enter this PA in pour page table.

For this, introduce xenmem_* which manage the PA space. In PVH mode this
is just allocated from the iomem_ex extent.

With this, I can start a PV domU, and the guest's kernel boots (and
the console works). It hangs because the backend driver can't map the
frontend ressources (yet).

Note that, per https://xenbits.xen.org/docs/unstable/support-matrix.html,
dom0 PVH support is still considered experimental by Xen.

s/occured/occurred/ in comments, log messages and man pages.

Sync w/ HEAD.

Work in progress on dom0 PVH support. kernel boots and xl info works,
but we can't start a domU yet.

Pull up following revision(s) (requested by bouyer in ticket #935):

	sys/arch/xen/x86/x86_xpmap.c: revision 1.89
	sys/arch/x86/include/pmap.h: revision 1.121
	sys/arch/xen/xen/privcmd.c: revision 1.58
	sys/external/mit/xen-include-public/dist/xen/include/public/memory.h: revision 1.2
	sys/arch/xen/include/xenpmap.h: revision 1.44
	sys/arch/xen/include/xenio.h: revision 1.12
	sys/arch/x86/x86/pmap.c: revision 1.394
	(all via patch)

Ajust pmap_enter_ma() for upcoming new Xen privcmd ioctl:
pass flags to xpq_update_foreign()

Introduce a pmap MD flag: PMAP_MD_XEN_NOTR, which cause xpq_update_foreign()
to use the MMU_PT_UPDATE_NO_TRANSLATE flag.
make xpq_update_foreign() return the raw Xen error. This will cause
pmap_enter_ma() to return a negative error number in this case, but the
only user of this code path is privcmd.c and it can deal with it.

Add pmap_enter_gnt()m which maps a set of Xen grant entries at the
specified va in the specified pmap. Use the hooks implemented for EPT to
keep track of mapped grand entries in the pmap, and unmap them
when pmap_remove() is called. This requires pmap_remove() to be split
into a pmap_remove_locked(), to be called from pmap_remove_gnt().

Implement new ioctl, needed by Xen 4.13:
IOCTL_PRIVCMD_MMAPBATCH_V2
IOCTL_PRIVCMD_MMAP_RESOURCE
IOCTL_GNTDEV_MMAP_GRANT_REF
IOCTL_GNTDEV_ALLOC_GRANT_REF

Always enable declarations needed by privcmd.c

Add need-flags for kernfs.
Compile Xen kernfs support only if kernfs is compiled in the kernel.
Should fix MODULAR build.

Implement new ioctl, needed by Xen 4.13:
IOCTL_PRIVCMD_MMAPBATCH_V2
IOCTL_PRIVCMD_MMAP_RESOURCE
IOCTL_GNTDEV_MMAP_GRANT_REF
IOCTL_GNTDEV_ALLOC_GRANT_REF

Make DOM0OPS build for PVH/PVHVM too

Merge the bouyer-xenpvh branch, bringing in Xen PV drivers support under HVM
guests in GENERIC.
Xen support can be disabled at runtime with
boot -c
disable hypervisor

Sync with HEAD

Sync with HEAD

make privpgops const

Mostly merge changes from HEAD upto 20200411

Merge changes from current as of 20200406

switch KERNFS_ALLOCENTRY() to use kmem_zalloc() instead of malloc()

Sync with head.

UVM locking changes, proposed on tech-kern:

- Change the lock on uvm_object, vm_amap and vm_anon to be a RW lock.
- Break v_interlock and vmobjlock apart.  v_interlock remains a mutex.
- Do partial PV list locking in the x86 pmap.  Others to follow later.

do not wait for memory in pgo_fault methods, just return ENOMEM
and let the uvm_fault code wait if it is appropriate.

update from HEAD

Sync with HEAD

use UVM_FLAG_UNMAP instead of unmapping separately.

remove checks for failure after memory allocation calls that cannot fail:

  kmem_alloc() with KM_SLEEP
  kmem_zalloc() with KM_SLEEP
  percpu_alloc()
  pserialize_create()
  psref_class_create()

all of these paths include an assertion that the allocation has not failed,
so callers should not assert that again.

Pull up following revision(s) (requested by maxv in ticket #195):
	sys/arch/arm/iomd/iomd_irqhandler.c: revision 1.21
	sys/arch/arm/ofw/ofw_irqhandler.c: revision 1.21
	sys/arch/atari/atari/intr.c: revision 1.24-1.25
	sys/arch/ews4800mips/sbd/fb_sbdio.c: revision 1.14
	sys/arch/hpcmips/tx/tx39icu.c: revision 1.34
	sys/arch/shark/isa/isa_irqhandler.c: revision 1.27
	sys/arch/sparc/sparc/machdep.c: revision 1.327
	sys/arch/sparc64/dev/psycho.c: revision 1.119
	sys/arch/sparc64/dev/schizo.c: revision 1.32
	sys/arch/sparc64/sparc64/machdep.c: revision 1.279
	sys/arch/sun68k/sun68k/bus.c: revision 1.22
	sys/arch/x86/x86/ipmi.c: revision 1.58
	sys/arch/xen/xen/privcmd.c: revision 1.46-1.49
Fix several memory leaks.

now that privcmd_map_obj cleans up correctly, don't double free...

correct error paths; still need to verify that the "didn't give us back..."
case is correct.

fix leak.

fix leak.

Rebase to HEAD as of a few days ago.

sync with head.

for a reference, the tree before this commit was tagged
as yamt-pagecache-tag8.

this commit was splitted into small chunks to avoid
a limitation of cvs.  ("Protocol error: too many arguments")

sync with head

- move variables inside their #ifdef use
- remove unused and set-but-unused variables
- use __USE() in a particularly ugly case

with these, and a couple of other changes, amd64 gcc 4.8.1 world
is able to complete build.sh release.

sync with head

Retire XEN_COMPAT_030001 as detailed on port-xen@:

http://mail-index.netbsd.org/port-xen/2012/06/25/msg007431.html

The xen_p2m API comes next.

ok bouyer@.
Tested on i386 PAE and amd64 (Xen 3.3 on private test bed, and
Xen 3.4 for Amazon EC2).

FWIW, Amazon always reported:

hypervisor0 at mainbus0: Xen version 3.4.3-kaos_t1micro

multiple times for Europe and US West-1, so I guess they are now at
3.4 (32 and 64 bits).

Sync with HEAD. Most notably: uvm/pmap work done by rmind@, and MP Xen
work of cherry@.

No regression observed on suspend/restore.

Catchup with rmind-uvmplock merge.

- privpgop_fault: call pmap_update() before uvmfault_unlockall().
- privcmd_ioctl, xengnt_more_entries: add missing pmap_update().

Welcome to 5.99.53!  Merge rmind-uvmplock branch:

- Reorganize locking in UVM and provide extra serialisation for pmap(9).
  New lock order: [vmpage-owner-lock] -> pmap-lock.

- Simplify locking in some pmap(9) modules by removing P->V locking.

- Use lock object on vmobjlock (and thus vnode_t::v_interlock) to share
  the locks amongst UVM objects where necessary (tmpfs, layerfs, unionfs).

- Rewrite and optimise x86 TLB shootdown code, make it simpler and cleaner.
  Add TLBSTATS option for x86 to collect statistics about TLB shootdowns.

- Unify /dev/mem et al in MI code and provide required locking (removes
  kernel-lock on some ports).  Also, avoid cache-aliasing issues.

Thanks to Andrew Doran and Joerg Sonnenberger, as their initial patches
formed the core changes of this branch.

privpgop_fault: simplify and sync with changes in the branch.

Implement sharing of vnode_t::v_interlock amongst vnodes:
- Lock is shared amongst UVM objects using uvm_obj_setlock() or getnewvnode().
- Adjust vnode cache to handle unsharing, add VI_LOCKSHARE flag for that.
- Use sharing in tmpfs and layerfs for underlying object.
- Simplify locking in ubc_fault().
- Sprinkle some asserts.

Discussed with ad@.

Sync with HEAD

sync to netbsd-5

Change struct uvm_object::vmobjlock to be dynamically allocated with
mutex_obj_alloc().  It allows us to share the locks among UVM objects.

sync with head

Typo in a wchan string.

Pull up following revision(s) (requested by bouyer in ticket #1271):
	sys/arch/xen/xen/privcmd.c: revision 1.40
Use paddr_t to store physical address and cast mfn values to paddr_t
before shift. Fix overflow issue preventing xend from working as
reported by Mark Davies on port-xen@

Use paddr_t to store physical address and cast mfn values to paddr_t
before shift. Fix overflow issue preventing xend from working as
reported by Mark Davies on port-xen@

Sync with HEAD.

Remove 3rd and 4th clauses.  OK cl@ (copyright holder).

sync with head.

remove Xen2 support.
ok bouyer@

Sync with HEAD.

Commit is split, to avoid a "too many arguments" protocol error.

sync with head.

Sync with HEAD.

ansify function definitions

Pull up following revision(s) (requested by jym in ticket #547):
	sys/arch/xen/xen/privcmd.c: revision 1.36
Do not continue silently on a page fault for an INVALID_PAGE, and instead
report an EFAULT like Xen does.
This avoids bad situations where a domain calls privpgop_fault() in a loop
by trying to map an invalid MFN.
See also http://mail-index.netbsd.org/port-xen/2009/03/03/msg004803.html

Do not continue silently on a page fault for an INVALID_PAGE, and instead
report an EFAULT like Xen does.

This avoids bad situations where a domain calls privpgop_fault() in a loop
by trying to map an invalid MFN.

See also http://mail-index.netbsd.org/port-xen/2009/03/03/msg004803.html

Sync with HEAD.

Sync with HEAD.

Update haad-dm branch to haad-dm-base2.

Clean up code. No functional changes intended.

Reviewed by bouyer@.

Remove trivial compat ifdefs.

introduce two macros: xendomain_is_dom0() and xendomain_is_privileged(). Use them.

Sync with HEAD.

Don't use a pointer to vm_map_entry after releasing the vm_map_lock().
Pointed out by yamt@.

Add checks to avoid possible calls to kmem_alloc() with 0 values.

Approved by bouyer.

Sync with HEAD.

Sync with HEAD.

Fix IOCTL_PRIVCMD_MMAPBATCH: don't blindly map requested pages read/write
but use the map's protection bits, as the hypervisor may refuse read/write
mappings for some entries. Now suspend/resume of domUs should work
from a NetBSD dom0, provided that the domU's kernel supports it.

From Jean-Yves Migeon.

Sync with wrstuden-revivesa-base-2.

privcmd_xen2bsd_errno(): 0 is also a valid error code.

When shutting down or rebooting a domu, a phantom domain was left with:

> xm list
Domain-Unnamed                               1   467     1     ---s--  46.0

The root cause is a discrepancy in the error *value* codes:
BSD uses the AT&T Unix Version 6 error codes, while Xen uses
Unix System V error codes (or actually what Linux/i386 has taken over from it).

After shutting down (or rebooting) a domU, the guest container gets destroyed.
This implies freeing resources used by the guest (RAM, internal management structures, etc.).

The destroy process is an asynchronous process in order to not block the Dom0 (and other DomUs).
The destroy process works this way:

The XEN_DOMCTL_destroydomain is invoked from the xentools (python, libxc code).
XEN_DOMCTL_destroydomain hypercall calls domain_kill().
domain_kill() calls domain_relinquish_resources().
domain_relinquish_resources() calls relinquish_memory().
relinquish_memory() calls hypercall_preempt_check().

hypercall_preempt_check() makes all this asynchronous.
It fails, if there's an other hypercall pending.
In that case relinquish_memory() returns EAGAIN, which means, just retry to continue the destroy process.

EAGAIN is passed through the return path back into the python code
(= userspace). The python code checks for EAGAIN and *should*
retry, but it didn't.

In Unix System V / Linux, EAGAIN has the error code value 11.
In BSD, EAGAIN has the error code value 35 and EDEADLK has the error code value 11.

This means, Xen returning EAGAIN means for the python code EDEADLK.
This lead to the confusing error message 'domain destroy failed due to Resource Deadlock avoided'.

We finally convert the error code from the Xen hypercall to BSD before passing it upstream.

IOCTL_PRIVCMD_MMAPBATCH used guest physical address 0x0 to mark a page as invalid.
Since we have to treat 0x0 as a valid page, this got broken in rev. 1.26.
Introduce INVALID_PAGE as magic value and restore the check.
This unbreaks IOCTL_PRIVCMD_MMAPBATCH while allowing to launch HVM guests.

In Xen 3.2 (c/s 15985) the semantic of the HVM domain builder changed:

hvm: Avoid need for ugly setcpucontext() in HVM domain builder by
pre-setting the vcpu0 to runnable inside Xen, and have the builder
insert a JMP instruction to reach the hvmloader entry point from
address 0x0.

So we have to treat guest physical address 0x0 like every one
or we end in a page fault loop when launching a HVM guest, otherwise.

XXX Keep this for Xen2 as this change hasn't been tested there.

Sync with netbsd-4.

Pull up revisions: (requested by bouyer in ticket #1083)
  src/sys/arch/xen/include/xenio.h	1.6
  src/sys/arch/xen/include/xenio3.h	1.2
  src/sys/arch/xen/xen/privcmd.c	1.25

Fix IOCTL_PRIVCMD_HYPERCALL issue which shows up with xen-3.1.3:
some hypercalls results are returned though the error path (depending on
sign, it's an error code or a result), and some results are interpreted in
a special way by the NetBSD kernel (e.g. -1).
Add a 'retval' member to the privcmd_hypercall_t argument, which holds
the hypercall result if it completed without error. The error code
is returned via the usual error path.
Handle the old IOCTL_PRIVCMD_HYPERCALL under COMPAT_40.

While there, make the double-inclusion protection #define match the
convention in xenio3.h and xenio.h.

sync with HEAD

sync with head.

Sync with HEAD.

Fix IOCTL_PRIVCMD_HYPERCALL issue which shows up with xen-3.1.3:
some hypercalls results are returned though the error path (depending on
sign, it's an error code or a result), and some results are interpreted in
a special way by the NetBSD kernel (e.g. -1).
Add a 'retval' member to the privcmd_hypercall_t argument, which holds
the hypercall result if it completed without error. The error code
is returned via the usual error path.
Handle the old IOCTL_PRIVCMD_HYPERCALL under COMPAT_40.

While there, make the double-inclusion protection #define match the
convention in xenio3.h and xenio.h.

sync with head

sync with HEAD

Sync with HEAD

uobj->vmobjlock is a mutex these days.

Sync with HEAD.

sync with head

Sync with HEAD.

Sync with HEAD.

IOCTL_PRIVCMD_MMAP*: instead of brutally enterring the new entries in
the process page table, properly uvm_unmap1() the VA range and enter a new
uvm_map backed by an object. There is a know race between uvm_unmap1() and
uvm_map(), where another thread could get our VA range; in practice
I think none of the softwares using this interface are multithreaded (or at
last they are single-threaded when using it).

Use __define__ instead of define, pointed out by christos.

Sync with HEAD. amd64 Xen support needs testing.

a_l -> curlwp

Pull up the bouyer-xenamd64 branch to HEAD. This brings in amd64 support
to NetBSD/Xen, both Dom0 and DomU.

Of course a_data is already in kernel space.

Initial domain0 support for xenamd64. The kernel boots multiuser, but
xen tools have not been tried yet.
In this process, cleanup some more the page table bootstrap, and properly
handle event counters for soft interrupts.

sync with HEAD

Prepare for xenamd64:
- kill xen/i386/identcpu.c, use i386/i386/identcpu.c instead (with a few
  #ifndef XEN)
- move some files that can be shared between i386 and amd64 from
  xen/i386 to xen/x86 (or to xen/xen for non-cpu-specific code)
- split assembly out of xen/include/hypervisor.h to xen/include/hypercalls.h
- use <xen/...> instead of <machine/...> for cpu-independant include files.

more work needed here, i386-specific files should got out of arch/xen to
arch/xeni386, and more code shared with arch/i386.

Merge the ppcoea-renovation branch to HEAD.

This branch was a major cleanup and rototill of many of the various OEA
cpu based PPC ports that focused on sharing as much code as possible
between the various ports to eliminate near-identical copies of files in
every tree.  Additionally there is a new PIC system that unifies the
interface to interrupt code for all different OEA ppc arches.  The work
for this branch was done by a variety of people, too long to list here.

TODO:
bebox still needs work to complete the transition to -renovation.
ofppc still needs a bunch of work, which I will be looking at.
ev64260 still needs to be renovated
amigappc was not attempted.

NOTES:
pmppc was removed as an arch, and moved to a evbppc target.

Sync with HEAD

sync with head.

Sync w/ NetBSD-4-RC_1

Sync with HEAD.

Sync with HEAD.

Sync with HEAD.

+#include <sys/proc.h>

Sync with head.

Sync with head.

Sync with HEAD.

Pull up following revision(s) (requested by bouyer in ticket #720):
	sys/arch/xen/xen/privcmd.c: revision 1.17
IOCTL_PRIVCMD_MMAP: properly map entries from 0 to (mcmd->num - 1), instead
of mapping mcmd->num times entry 0. xentools < 3.1 probably didn't use this
with more than one entry at a time ...

IOCTL_PRIVCMD_MMAP: properly map entries from 0 to (mcmd->num - 1), instead
of mapping mcmd->num times entry 0. xentools < 3.1 probably didn't use this
with more than one entry at a time ...

Sync with head.

sync with head.

Pull up following revision(s) (requested by bouyer in ticket #599):
	sys/arch/xen/xen/privcmd.c: revision 1.16
IOCTL_PRIVCMD_MMAPBATCH: mimic linux behavior and return no error
even if a pmap_enter_ma() (the underlying hypercall, really) returns one.
The fact that the mapping failed is notified to the called by oring
0xF0000000 to the mfn.  This makes Xen 3.0.4 HVM work.

IOCTL_PRIVCMD_MMAPBATCH: mimic linux behavior and return no error
even if a pmap_enter_ma() (the underlying hypercall, really) returns one.
The fact that the mapping failed is notified to the called by oring
0xF0000000 to the mfn.  This makes Xen 3.0.4 HVM work.

sync with head.

Sync with head.

sync with head

XEN_NO_HYPERCALLPAGE is redundant with XEN_COMPAT_030001; make
XEN_COMPAT_030001 disable the hypercall page too and remove
XEN_NO_HYPERCALLPAGE

The Xen folks says everyone should use hypercall call page now, make it so.
Old hypercall call method still still available with
options XEN_NO_HYPERCALLPAGE
but this is disabled by default (xen-3.0.2-2 supports hypercall call page
just fine).
While there add a VIRT_BASE= string in __xen_guest section; from
Bastian Blank on port-xen@.

sync with head

sync with head.

Sync with head.

Merge 2006-05-24 NetBSD-current into the "peter-altq" branch.

sync with head.

integrate kauth.

Adapt to kernel authorization KPI.

I expect *some* lossage here...

sync with head.

merge xen pmap_enter, pmap_enter_ma, pmap_remap_pages.
ok'ed by Manuel Bouyer.

Pull up following revision(s) (requested by bouyer in ticket #1104):
	sys/arch/xen/xen/privcmd.c: revision 1.6
	sys/arch/xen/i386/pmap.c: revision 1.14
	sys/arch/xen/include/pmap.h: revision 1.5
	sys/arch/xen/xen/xennetback.c: revision 1.12 via patch
	sys/arch/xen/xen/xbdback.c: revision 1.15
Add a vm_prot_t parameter to pmap_remap_pages(), and use it for the new PTE
instead to always trying PG_RW and falling back to PG_RO if this fails.
Use uvm_map_checkprot() in IOCTL_PRIVCMD_MMAP and IOCTL_PRIVCMD_MMAP_BATCH
to compute the appropriate vm_prot_t for pmap_remap_pages().
Thanks to Jed Davis for pointing out uvm_map_checkprot().

Snapshot of work in progress on NetBSD port to Xen3:
- kernel (both dom0 and domU) boot, console is functionnal and it can starts
  software from a ramdisk
- there is no driver front-end expect console for domU yet.
- dom0 can probe devices and ex(4) work when Xen3 is booted without acpi
  and apic support. But the on-board IDE doens't get interrupts.
  The PCI code still needs work (it's hardcoded to mode 1). Some of this
  code should be shared with ../x86
  The physical insterrupt code needs to get MPBIOS and ACPI support, and
  do interrupt routing to properly interract with Xen.
To enable Xen-3.0 support, add
options XEN3
to your kernel config file (this will disable Xen2 support)
Changes affecting Xen-2.0 support (no functionnal changes intended):
- get more constants from genassym for assembly code
- remove some unneeded registers move from start()
- map the shared info page from start(), and remove the pte = 0xffffffff hack
- vector.S: in hypervisor_callback() make sure %esi points to
  HYPERVISOR_shared_info before accessing the info page. Remplace some
  hand-written assembly with the equivalent macro defined in frameasm.h
- more debug code, dissabled by default.

while here added my copyright on some files I worked on in 2005.

sync with head.

privcmd_ioctl: wrap IOCTL_PRIVCMD_INITDOMAIN_EVTCHN_OLD in #ifdef COMPAT_30.

__asm__ -> __asm
__const__ -> const
__inline__ -> inline
__volatile__ -> volatile

change a_p -> a_l->l_proc [untested]

merge ktrace-lwp.

Sync with HEAD. Here we go again...

Pull up following revision(s) (requested by bouyer in ticket #776):
	sys/arch/xen/xen/privcmd.c: revision 1.5
Apply patch from Jed Davis, posted to port-xen:
Implement IOCTL_PRIVCMD_MMAPBATCH, as a loop calling pmap_remap_pages().
XXX this should do the MMU operations in batch.

Add a vm_prot_t parameter to pmap_remap_pages(), and use it for the new PTE
instead to always trying PG_RW and falling back to PG_RO if this fails.
Use uvm_map_checkprot() in IOCTL_PRIVCMD_MMAP and IOCTL_PRIVCMD_MMAP_BATCH
to compute the appropriate vm_prot_t for pmap_remap_pages().
Thanks to Jed Davis for pointing out uvm_map_checkprot().

Apply patch from Jed Davis, posted to port-xen:
Implement IOCTL_PRIVCMD_MMAPBATCH, as a loop calling pmap_remap_pages().
XXX this should do the MMU operations in batch.

Pull up revision 1.4 (requested by yamt in ticket #465):
privcmd_ioctl: remove unnecessary variable shadowing.

privcmd_ioctl: remove unnecessary variable shadowing.

Pull up revision 1.3 (requested by yamt in ticket #351):
privcmd_ioctl: don't abuse errno for IOCTL_PRIVCMD_INITDOMAIN_EVTCHN.
renumber the ioctl and keep the old one for compatibility.
PR/30027.

privcmd_ioctl: don't abuse errno for IOCTL_PRIVCMD_INITDOMAIN_EVTCHN.
renumber the ioctl and keep the old one for compatibility.
PR/30027.

sync with -current

Sync with HEAD.

sync with head.  xen and whitespace.  xen part is not finished.

Merge the bouyer-xen2 branch. This add supports for the Xen 2.0 virtual
machine kernel (both privileged and non-privileged domains), and remove support
for the old xen 1.2.

Implement pmap_remap_pages(), which remplace one or more pages in a
mapping with different pages, possibly from a foreing domain.
Use this to implement IOCTL_PRIVCMD_MMAP.

First pieces of domain control operations:
- use an up to date xenio.h
- update privcmd.c for newer ioctls (incomplete, some just return an error for
  now)
- add a /dev/xenevt pseudo-device, which provide to userland an interface to
  xen events
Now xend starts, and basic xm commands (such as list) work.

Fix various comments that describe the argument structures

Fix the sync with head I botched.

Sync with HEAD.

Sync with HEAD

Pull up revision 1.1 (requested by cl in ticket #337):
	Upgrade xen support:
	 - add block device driver
	 - network device driver bug fixes
	 - support for vga/keyboard/mouse
	 - support for domain0 operations
	 - fix /dev/mem and i386_iopl, reboot, event dispatch
	 - fix clock support, cpu speed report, lazy fpu switching
	 - add xen12load loader
	 - sys/arch/xen parts of build.sh release support
	[cl, ticket #337]

file privcmd.c was added on branch ktrace-lwp on 2004-08-03 10:43:19 +0000

file privcmd.c was added on branch netbsd-2-0 on 2004-05-22 15:59:21 +0000

Add support for domain0 operations:
- access to all physical memory
- access to hypervisor traps from userland
- setup/config Xen's network routing/firewall rules