From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:59841) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1etzW1-0007Q8-34 for qemu-devel@nongnu.org; Thu, 08 Mar 2018 12:39:42 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1etzVw-0008H9-5q for qemu-devel@nongnu.org; Thu, 08 Mar 2018 12:39:41 -0500 Received: from smtp.citrix.com ([66.165.176.89]:44779) by eggs.gnu.org with esmtps (TLS1.0:RSA_ARCFOUR_SHA1:16) (Exim 4.71) (envelope-from ) id 1etzVv-0008GN-VL for qemu-devel@nongnu.org; Thu, 08 Mar 2018 12:39:36 -0500 From: Ian Jackson Date: Thu, 8 Mar 2018 17:39:06 +0000 Message-ID: <1520530757-4477-1-git-send-email-ian.jackson@eu.citrix.com> MIME-Version: 1.0 Content-Type: text/plain Subject: [Qemu-devel] [PATCH v6 00/11] xen: xen-domid-restrict improvements List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: qemu-devel@nongnu.org Cc: xen-devel@lists.xenproject.org This series provides necessary support for running qemu as a Xen device model without power equivalent to root. In particular, it makes -xen-domid-restrict effective. I have taken into account all the comments from v5 (from October!) and there are also two new patches from Ross Lagerwall. m a [PATCH 01/11] xen: link against xentoolcore a [PATCH 02/11] xen: restrict: use xentoolcore_restrict_all r [PATCH 03/11] xen: defer call to xen_restrict until just before a [PATCH 04/11] xen: destroy_hvm_domain: Move reason into a variable ra [PATCH 05/11] xen: move xc_interface compatibility fallback further * r [PATCH 06/11] xen: destroy_hvm_domain: Try xendevicemodel_shutdown * r [PATCH 07/11] os-posix: Provide new -runas : facility m [PATCH 08/11] configure: do_compiler: Dump some extra info under bash + [PATCH 09/11] xen: Use newly added dmops for mapping VGA memory + [PATCH 10/11] xen: Expect xenstore write to fail when restricted + [PATCH 11/11] scripts/get_maintainer.pl: Print proper error message m = commit message (only) changed in v6 of the series * = patch changed in v6 of the series + = new patch r = reviewed (by someone other than me) a = acked Thanks for your attention. Regards, Ian. From mboxrd@z Thu Jan 1 00:00:00 1970 From: Ian Jackson Subject: [PATCH v6 00/11] xen: xen-domid-restrict improvements Date: Thu, 8 Mar 2018 17:39:06 +0000 Message-ID: <1520530757-4477-1-git-send-email-ian.jackson@eu.citrix.com> Mime-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Return-path: Received: from us1-rack-dfw2.inumbo.com ([104.130.134.6]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1etzVw-0005Xr-Dv for xen-devel@lists.xenproject.org; Thu, 08 Mar 2018 17:39:36 +0000 List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-devel-bounces@lists.xenproject.org Sender: "Xen-devel" To: qemu-devel@nongnu.org Cc: xen-devel@lists.xenproject.org List-Id: xen-devel@lists.xenproject.org VGhpcyBzZXJpZXMgcHJvdmlkZXMgbmVjZXNzYXJ5IHN1cHBvcnQgZm9yIHJ1bm5pbmcgcWVtdSBh cyBhIFhlbgpkZXZpY2UgbW9kZWwgd2l0aG91dCBwb3dlciBlcXVpdmFsZW50IHRvIHJvb3QuICBJ biBwYXJ0aWN1bGFyLCBpdAptYWtlcyAteGVuLWRvbWlkLXJlc3RyaWN0IGVmZmVjdGl2ZS4KCkkg aGF2ZSB0YWtlbiBpbnRvIGFjY291bnQgYWxsIHRoZSBjb21tZW50cyBmcm9tIHY1IChmcm9tIE9j dG9iZXIhKSBhbmQKdGhlcmUgYXJlIGFsc28gdHdvIG5ldyBwYXRjaGVzIGZyb20gUm9zcyBMYWdl cndhbGwuCgogIG0gIGEgW1BBVENIIDAxLzExXSB4ZW46IGxpbmsgYWdhaW5zdCB4ZW50b29sY29y ZQogICAgIGEgW1BBVENIIDAyLzExXSB4ZW46IHJlc3RyaWN0OiB1c2UgeGVudG9vbGNvcmVfcmVz dHJpY3RfYWxsCiAgICByICBbUEFUQ0ggMDMvMTFdIHhlbjogZGVmZXIgY2FsbCB0byB4ZW5fcmVz dHJpY3QgdW50aWwganVzdCBiZWZvcmUKICAgICBhIFtQQVRDSCAwNC8xMV0geGVuOiBkZXN0cm95 X2h2bV9kb21haW46IE1vdmUgcmVhc29uIGludG8gYSB2YXJpYWJsZQogICAgcmEgW1BBVENIIDA1 LzExXSB4ZW46IG1vdmUgeGNfaW50ZXJmYWNlIGNvbXBhdGliaWxpdHkgZmFsbGJhY2sgZnVydGhl cgogICogciAgW1BBVENIIDA2LzExXSB4ZW46IGRlc3Ryb3lfaHZtX2RvbWFpbjogVHJ5IHhlbmRl dmljZW1vZGVsX3NodXRkb3duCiAgKiByICBbUEFUQ0ggMDcvMTFdIG9zLXBvc2l4OiBQcm92aWRl IG5ldyAtcnVuYXMgPHVpZD46PGdpZD4gZmFjaWxpdHkKICBtICAgIFtQQVRDSCAwOC8xMV0gY29u ZmlndXJlOiBkb19jb21waWxlcjogRHVtcCBzb21lIGV4dHJhIGluZm8gdW5kZXIgYmFzaAogICsg ICAgW1BBVENIIDA5LzExXSB4ZW46IFVzZSBuZXdseSBhZGRlZCBkbW9wcyBmb3IgbWFwcGluZyBW R0EgbWVtb3J5CiAgKyAgICBbUEFUQ0ggMTAvMTFdIHhlbjogRXhwZWN0IHhlbnN0b3JlIHdyaXRl IHRvIGZhaWwgd2hlbiByZXN0cmljdGVkCiAgKyAgICBbUEFUQ0ggMTEvMTFdIHNjcmlwdHMvZ2V0 X21haW50YWluZXIucGw6IFByaW50IHByb3BlciBlcnJvciBtZXNzYWdlCgogbSA9IGNvbW1pdCBt ZXNzYWdlIChvbmx5KSBjaGFuZ2VkIGluIHY2IG9mIHRoZSBzZXJpZXMKICogPSBwYXRjaCBjaGFu Z2VkIGluIHY2IG9mIHRoZSBzZXJpZXMKICsgPSBuZXcgcGF0Y2gKIHIgPSByZXZpZXdlZCAoYnkg c29tZW9uZSBvdGhlciB0aGFuIG1lKQogYSA9IGFja2VkCgpUaGFua3MgZm9yIHlvdXIgYXR0ZW50 aW9uLgoKUmVnYXJkcywKSWFuLgoKX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX18KWGVuLWRldmVsIG1haWxpbmcgbGlzdApYZW4tZGV2ZWxAbGlzdHMueGVucHJv amVjdC5vcmcKaHR0cHM6Ly9saXN0cy54ZW5wcm9qZWN0Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL3hl bi1kZXZlbA==