Demi Marie Obenour 20d13cee15 misc: Add security policy ...

This adds a threat model and security policy.  It is loosely based on
the Xen Project Security Policy, but with many changes to fit Cloud
Hypervisor better.

The threat model is comprehensive and includes:

- Which entities are fully trusted.
- What untrusted entities are and are not allowed to do.
- What Cloud Hypervisor expects from its deployment environment.
- What trusted entities can safely do on behalf of untrusted entities.

Signed-off-by: Demi Marie Obenour <demiobenour@gmail.com>

2026-07-23 01:02:04 +00:00

..

amd_sev_snp.md

docs: update SEV-SNP build information

2026-07-06 23:29:52 +00:00

api.md

docs: clarify D-Bus API names

2026-06-30 17:03:30 +00:00

balloon.md

docs: fix syntax issues and struct description in devices

2026-01-14 09:20:34 +00:00

building.md

docs: fix some minor syntax issues in api/building

2026-01-14 09:20:34 +00:00

coverage.md

docs: improve code coverage document

2024-10-23 18:38:34 +01:00

cpu.md

vmm: Add core scheduling support for vCPU threads

2026-02-26 11:57:39 +00:00

custom-image.md

docs: Fix scripts link

2024-10-23 18:38:50 +01:00

debug-port.md

docs: update CPU option examples

2026-06-30 17:03:30 +00:00

device_model.md

docs: Update the relevant documentation

2026-04-17 07:45:22 +00:00

disk_locking.md

docs: Add disk locking documentation

2026-03-08 10:07:03 +00:00

fs.md

docs: mention thread pool option for virtiofsd

2022-08-03 20:36:22 +00:00

fuzzing.md

misc: Fix spelling issues

2024-06-08 16:31:30 +00:00

fw_cfg.md

vmm, devices: Add fw_cfg string item support

2026-04-20 09:39:56 +00:00

gdb.md

docs: fix gdb path option name

2026-01-15 18:55:36 +00:00

generic-vhost-user.md

vmm: config: Fix generic vhost-user parsing

2026-07-09 10:56:46 +00:00

heap-profiling.md

docs: Add instructions for heap profiling

2023-01-17 14:02:01 +00:00

hotplug.md

docs: fix some syntax and bash usage

2026-01-14 09:20:34 +00:00

intel_tdx.md

docs: fix some syntax and format issues in tdx/sev

2026-01-14 09:20:34 +00:00

io_throttling.md

docs: fix some syntax and bash usage

2026-01-14 09:20:34 +00:00

iommu.md

docs: fix some syntax and bash usage

2026-01-14 09:20:34 +00:00

ivshmem.md

vmm, docs: make PCI BDF configurable for ivshmem

2026-06-03 13:54:56 +00:00

landlock.md

docs: fix some syntax and bash usage

2026-01-14 09:20:34 +00:00

live_migration.md

docs: Include description for zone_updates parameter

2026-07-20 16:06:55 +00:00

logging.md

docs: clarify log level guidance in logging.md

2026-07-01 16:45:38 +00:00

macvtap-bridge.md

docs: fix syntax issues and struct description in devices

2026-01-14 09:20:34 +00:00

memory.md

docs: update new prefault behavior in memory.md

2026-06-30 16:56:42 +00:00

mshv.md

docs: update SEV-SNP backend support

2026-06-30 17:03:30 +00:00

performance_metrics.md

performance-metrics: add restore latency performance metric

2024-08-02 08:29:03 +00:00

profiling.md

docs: update command line options to use clap

2023-10-20 11:44:28 -07:00

releases.md

docs: remove LTS information from releases.md

2026-05-15 15:40:01 +00:00

riscv.md

docs: Update riscv docs for developing in QEMU VM

2025-05-03 11:11:05 +00:00

seccomp.md

vmm: Support setting seccomp to errno

2026-07-10 21:12:26 +00:00

snapshot_restore.md

virtio-devices: net: add guest-announce plumbing

2026-07-02 15:17:40 +00:00

testing.md

docs: scope testing container overview

2026-06-30 17:03:30 +00:00

threat-model.md

misc: Add security policy

2026-07-23 01:02:04 +00:00

tpm.md

docs: Fix a typo on the doc for tpm

2022-11-27 18:55:07 +00:00

tracing.md

misc: Fix spelling issues

2024-06-08 16:31:30 +00:00

uefi.md

docs: Add prebuilt firmware and AArch64 notes

2026-05-13 22:14:22 +00:00

vdpa.md

docs: Update the relevant documentation

2026-04-17 07:45:22 +00:00

vfio-user.md

docs/vfio-user: Add more description on NVMe Device part

2021-11-22 11:34:42 -08:00

vfio.md

docs: Document VFIO live migration support

2026-07-15 22:45:08 +00:00

vhost-user-blk-testing.md

docs: update command line options to use clap

2023-10-20 11:44:28 -07:00

vhost-user-net-testing.md

docs: Update vhost-user-net-testing instructions

2024-01-17 09:06:11 -08:00

virtiofs-root.md

docs: fix syntax issues and struct description in devices

2026-01-14 09:20:34 +00:00

vsock.md

docs: cloud-hypervisor only supports stream vsock

2024-03-19 10:19:22 -07:00

windows-kdcom-debugging.md

docs: Rewrite KDCOM debugging to use convey bridge

2026-07-15 17:27:01 +00:00

windows-kdnet-debugging.md

docs: document KDNET over virtio-net

2026-07-09 21:06:20 +00:00

windows.md

docs: document KDNET over virtio-net

2026-07-09 21:06:20 +00:00