[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Qemu-devel] [PATCH v2 0/7] xen: xen-domid-restrict improvements
From: |
Ian Jackson |
Subject: |
[Qemu-devel] [PATCH v2 0/7] xen: xen-domid-restrict improvements |
Date: |
Wed, 4 Oct 2017 16:53:04 +0100 |
I have been working on trying to get qemu, when running as a Xen
device model, to _actually_ not have power equivalent to root.
I think I have achieved this, with some limitations (which will be
discussed in my series against xen.git.
However, there are changes to qemu needed. In particular
* The -xen-domid-restrict option does not work properly right now.
It only restricts a small subset of the descriptors qemu has open.
I am introducing a new library call in the Xen libraries for this,
xentoolcore_restrict_all.
* We need to call a different function on domain shutdown.
* The restriction operation needs to be done at a slightly different
time, necessitating a new hook.
* Additionally, in the future, we intend to be able to set aside
a uid range for these qemus to run in, and that involves being
able to tell qemu to drop privilege by numeric uid and gid.
Thanks very much to Anthony Perard for his review of the first, RFC,
version, and for helping out with configure.
At least the first patch of this, "xen: link against xentoolcore",
will very likely be necessary, since the corresponding xen.git series
is likely to make Xen 4.10.
Ian.
- [Qemu-devel] [PATCH v2 0/7] xen: xen-domid-restrict improvements,
Ian Jackson <=
- [Qemu-devel] [PATCH 6/8] xen: destroy_hvm_domain: Try xendevicemodel_shutdown, Ian Jackson, 2017/10/04
- [Qemu-devel] [PATCH 3/8] xen: defer call to xen_restrict until after os_setup_post, Ian Jackson, 2017/10/04
- [Qemu-devel] [PATCH 2/8] xen: restrict: use xentoolcore_restrict_all, Ian Jackson, 2017/10/04
- [Qemu-devel] [PATCH 8/8] RFC configure: do_compiler: Dump some extra info under bash, Ian Jackson, 2017/10/04
- [Qemu-devel] [PATCH 1/8] xen: link against xentoolcore, Ian Jackson, 2017/10/04
- [Qemu-devel] [PATCH 5/8] xen: move xc_interface compatibility fallback further up the file, Ian Jackson, 2017/10/04
- [Qemu-devel] [PATCH 4/8] xen: destroy_hvm_domain: Move reason into a variable, Ian Jackson, 2017/10/04
- [Qemu-devel] [PATCH 7/8] os-posix: Provide new -runasid option, Ian Jackson, 2017/10/04
- Re: [Qemu-devel] [PATCH v2 0/7] xen: xen-domid-restrict improvements, no-reply, 2017/10/04