fe31f9be81
do not understand the new PV driver protocol. - Upstream Xen version renamed to 4.0.0 in changeset 20624 & 20625. - fate#307594: HP-MCBS: XEN: support NR_CPUS=256 This is a spec file change (xen.spec) - bnc#555152 - "NAME" column in xentop (SLES11) output limited to 10 characters unlike SLES10 The update to c/s 20572 includes this fix (at c/s 20567). - Modify xen-paths.diff - Merge xend-tap-fix.patch to xen-domUloader.diff remove part of it which accepted by upstream - Load gntdev module in xend init script similar to blkbk, netbk, etc. - Backport dmmd from sles11/xen block-dmmd xen-qemu-iscsi-fix.patch xen.spec - Fix regression when create_vbd for tap xend-tap-fix.patch - Temporarily disable libxl because of libconfig dependency. - fate#302864 domUloader support lvm in disk domUloader.py Note: for test in Beta1, if not good, remove it - fate#302864 domUloader support fs on whole disk domUloader.py - Turn KMPs back on now that kernel side fix is checked in. - fate#304415 VMM: ability to switch networking mode Add vif-route-ifup to handle routed configurations using sysconfig scripts. vif-route-ifup.patch - fate#307540 USB for Xen VMs usb-add.patch - fate#305545 XEN extra descriptive field within xenstore add_des.patch - Update to Xen version 3.5.0 for the following features. fate#304226 XEN: FlexMigration feature of VT-x2 support fate#305004 Add SR-IOV PF and VF drivers to Vt-d enabled Xen fate#306830 T states in Xen controlling by MSR fate#306832 Fix for xen panic on new processors fate#306833 Westmere and Nehalem-EX: Add support for Pause Loop exiting feature for Xen fate#306835 Xen: server virtual power management enhacement fate#306837 VT-d2 - PCI SIG ATS support fate#306872 Xen: Node manager support P/T-states change when Vt-d enable fate#306873 Xen: SMP guest live migration may fail with hap=1 on NHM fate#306875 Westmere: LT-SX (Xen) fate#306891 RAS features for Xen: Add support for Machine Check and CPU/Memory online/offline features fate#307322 1GB page support in Xen fate#307324 Xen IOMMU support OBS-URL: https://build.opensuse.org/package/show/Virtualization/xen?expand=0&rev=26
71 lines
2.9 KiB
Diff
71 lines
2.9 KiB
Diff
CVE-2007-0998 - remote compromise of dom0
|
|
|
|
Rather than completely disabling QEMU's console (which would remove
|
|
the "sendkey" command, among other useful things), remove all console
|
|
commands that can read/write dom0's state.
|
|
|
|
|
|
Index: xen-4.0.0-testing/tools/ioemu-remote/monitor.c
|
|
===================================================================
|
|
--- xen-4.0.0-testing.orig/tools/ioemu-remote/monitor.c
|
|
+++ xen-4.0.0-testing/tools/ioemu-remote/monitor.c
|
|
@@ -1497,6 +1497,7 @@ static const term_cmd_t term_cmds[] = {
|
|
"device|all", "commit changes to the disk images (if -snapshot is used) or backing files" },
|
|
{ "info", "s?", do_info,
|
|
"subcommand", "show various information about the system state" },
|
|
+#ifdef CONFIG_TRUSTED_CLIENT
|
|
{ "q|quit", "", do_quit,
|
|
"", "quit the emulator" },
|
|
{ "eject", "-fB", do_eject,
|
|
@@ -1509,6 +1510,7 @@ static const term_cmd_t term_cmds[] = {
|
|
"filename", "output logs to 'filename'" },
|
|
{ "log", "s", do_log,
|
|
"item1[,...]", "activate logging of the specified items to '/tmp/qemu.log'" },
|
|
+#endif
|
|
{ "savevm", "s?", do_savevm,
|
|
"tag|id", "save a VM snapshot. If no tag or id are provided, a new snapshot is created" },
|
|
{ "loadvm", "s", do_loadvm,
|
|
@@ -1538,8 +1540,10 @@ static const term_cmd_t term_cmds[] = {
|
|
"", "reset the system" },
|
|
{ "system_powerdown", "", do_system_powerdown,
|
|
"", "send system power down event" },
|
|
+#ifdef CONFIG_TRUSTED_CLIENT
|
|
{ "sum", "ii", do_sum,
|
|
"addr size", "compute the checksum of a memory region" },
|
|
+#endif
|
|
{ "usb_add", "s", do_usb_add,
|
|
"device", "add USB device (e.g. 'host:bus.addr' or 'host:vendor_id:product_id')" },
|
|
{ "usb_del", "s", do_usb_del,
|
|
@@ -1558,6 +1562,7 @@ static const term_cmd_t term_cmds[] = {
|
|
"state", "change mouse button state (1=L, 2=M, 4=R)" },
|
|
{ "mouse_set", "i", do_mouse_set,
|
|
"index", "set which mouse device receives events" },
|
|
+#ifdef CONFIG_TRUSTED_CLIENT
|
|
#ifdef HAS_AUDIO
|
|
{ "wavcapture", "si?i?i?", do_wav_capture,
|
|
"path [frequency bits channels]",
|
|
@@ -1565,6 +1570,7 @@ static const term_cmd_t term_cmds[] = {
|
|
#endif
|
|
{ "stopcapture", "i", do_stop_capture,
|
|
"capture index", "stop capture" },
|
|
+#endif
|
|
{ "memsave", "lis", do_memory_save,
|
|
"addr size file", "save to disk virtual memory dump starting at 'addr' of size 'size'", },
|
|
{ "pmemsave", "lis", do_physical_memory_save,
|
|
@@ -1646,6 +1652,7 @@ static const term_cmd_t info_cmds[] = {
|
|
"", "show KVM information", },
|
|
{ "usb", "", usb_info,
|
|
"", "show guest USB devices", },
|
|
+#ifdef CONFIG_TRUSTED_CLIENT
|
|
{ "usbhost", "", usb_host_info,
|
|
"", "show host USB devices", },
|
|
{ "profile", "", do_info_profile,
|
|
@@ -1677,6 +1684,7 @@ static const term_cmd_t info_cmds[] = {
|
|
{ "migrate", "", do_info_migrate, "", "show migration status" },
|
|
{ "balloon", "", do_info_balloon,
|
|
"", "show balloon information" },
|
|
+#endif
|
|
{ NULL, NULL, },
|
|
};
|
|
|