[Qemu-devel] [RESEND PULL v9 00/16] xen: xen-domid-restrict improvements

Ian Jackson posted 16 patches 6 years ago
Only 0 patches received!
accel/accel.c               |   9 ++++
configure                   |  33 +++++++++++-
hw/i386/xen/xen-hvm.c       |  75 ++++++++++++++------------
hw/xen/xen-common.c         |  21 +++++++-
include/hw/xen/xen_common.h | 125 +++++++++++++++++++++-----------------------
include/sysemu/accel.h      |   3 ++
os-posix.c                  |  91 +++++++++++++++++++++++++-------
qemu-options.hx             |   3 +-
scripts/checkpatch.pl       |   1 +
vl.c                        |   1 +
10 files changed, 242 insertions(+), 120 deletions(-)
[Qemu-devel] [RESEND PULL v9 00/16] xen: xen-domid-restrict improvements
Posted by Ian Jackson 6 years ago
The following changes since commit b8846a4d6352b2a1d2012f8b3b9115640524aeda:

  vl.c: new function serial_max_hds() (2018-04-26 13:58:29 +0100)

are available in the git repository at:

  https://xenbits.xen.org/git-http/people/iwj/qemu.git tags/for-upstream.depriv-2

for you to fetch changes up to 8bbe05d77360b73c1834808023016a778ccf55ca:

  configure: do_compiler: Dump some extra info under bash (2018-04-26 16:29:52 +0100)

----------------------------------------------------------------
xen: xen-domid-restrict improvements

This series provides necessary support for running qemu as a Xen
device model without power equivalent to root.  In particular, it
makes -xen-domid-restrict effective.

The patches are unchanged since v8, apart from additional reviews, and
rebasing onto master.  All the patches are now reviewed and/or acked
apart from the patch to configure, which has a Tested-by from Thomas
Huth.  I have stripped off the per-patch-series-verson update
comments.

----------------------------------------------------------------
Anthony PERARD (1):
      xen: link against xentoolcore

Ian Jackson (13):
      checkpatch: Add xendevicemodel_handle to the list of types
      AccelClass: Introduce accel_setup_post
      xen: restrict: use xentoolcore_restrict_all
      xen: defer call to xen_restrict until just before os_setup_post
      xen: destroy_hvm_domain: Move reason into a variable
      xen: move xc_interface compatibility fallback further up the file
      xen: destroy_hvm_domain: Try xendevicemodel_shutdown
      os-posix: cleanup: Replace fprintfs with error_report in change_process_uid
      os-posix: Provide new -runas <uid>:<gid> facility
      xen: Remove now-obsolete xen_xc_domain_add_to_physmap
      os-posix: cleanup: Replace fprintf with error_report in remaining call sites
      os-posix: cleanup: Replace perror with error_report
      configure: do_compiler: Dump some extra info under bash

Ross Lagerwall (2):
      xen: Use newly added dmops for mapping VGA memory
      xen: Expect xenstore write to fail when restricted

 accel/accel.c               |   9 ++++
 configure                   |  33 +++++++++++-
 hw/i386/xen/xen-hvm.c       |  75 ++++++++++++++------------
 hw/xen/xen-common.c         |  21 +++++++-
 include/hw/xen/xen_common.h | 125 +++++++++++++++++++++-----------------------
 include/sysemu/accel.h      |   3 ++
 os-posix.c                  |  91 +++++++++++++++++++++++++-------
 qemu-options.hx             |   3 +-
 scripts/checkpatch.pl       |   1 +
 vl.c                        |   1 +
 10 files changed, 242 insertions(+), 120 deletions(-)

Re: [Qemu-devel] [RESEND PULL v9 00/16] xen: xen-domid-restrict improvements
Posted by Peter Maydell 6 years ago
On 26 April 2018 at 19:15, Ian Jackson <ian.jackson@citrix.com> wrote:
> The following changes since commit b8846a4d6352b2a1d2012f8b3b9115640524aeda:
>
>   vl.c: new function serial_max_hds() (2018-04-26 13:58:29 +0100)
>
> are available in the git repository at:
>
>   https://xenbits.xen.org/git-http/people/iwj/qemu.git tags/for-upstream.depriv-2
>
> for you to fetch changes up to 8bbe05d77360b73c1834808023016a778ccf55ca:
>
>   configure: do_compiler: Dump some extra info under bash (2018-04-26 16:29:52 +0100)
>
> ----------------------------------------------------------------
> xen: xen-domid-restrict improvements
>
> This series provides necessary support for running qemu as a Xen
> device model without power equivalent to root.  In particular, it
> makes -xen-domid-restrict effective.
>
> The patches are unchanged since v8, apart from additional reviews, and
> rebasing onto master.  All the patches are now reviewed and/or acked
> apart from the patch to configure, which has a Tested-by from Thomas
> Huth.  I have stripped off the per-patch-series-verson update
> comments.
>

Applied, thanks.

-- PMM