646cd8897b
Updated block-dmmd script - fate#310510 - fix xenpaging restore changes to integrate paging into xm/xend xenpaging.autostart.patch xenpaging.doc.patch - bnc#787163 - VUL-0: CVE-2012-4544: xen: Domain builder Out-of- memory due to malicious kernel/ramdisk (XSA 25) CVE-2012-4544-xsa25.patch - bnc#779212 - VUL-0: CVE-2012-4411: XEN / qemu: guest administrator can access qemu monitor console (XSA-19) CVE-2012-4411-xsa19.patch - bnc#786516 - VUL-0: CVE-2012-4535: xen: Timer overflow DoS vulnerability CVE-2012-4535-xsa20.patch - bnc#786518 - VUL-0: CVE-2012-4536: xen: pirq range check DoS vulnerability CVE-2012-4536-xsa21.patch - bnc#786517 - VUL-0: CVE-2012-4537: xen: Memory mapping failure DoS vulnerability CVE-2012-4537-xsa22.patch - bnc#786519 - VUL-0: CVE-2012-4538: xen: Unhooking empty PAE entries DoS vulnerability CVE-2012-4538-xsa23.patch - bnc#786520 - VUL-0: CVE-2012-4539: xen: Grant table hypercall infinite loop DoS vulnerability CVE-2012-4539-xsa24.patch OBS-URL: https://build.opensuse.org/package/show/Virtualization/xen?expand=0&rev=212
55 lines
2.2 KiB
Diff
55 lines
2.2 KiB
Diff
Index: xen-4.2.0-testing/tools/hotplug/Linux/init.d/sysconfig.xendomains
|
|
===================================================================
|
|
--- xen-4.2.0-testing.orig/tools/hotplug/Linux/init.d/sysconfig.xendomains
|
|
+++ xen-4.2.0-testing/tools/hotplug/Linux/init.d/sysconfig.xendomains
|
|
@@ -98,7 +98,6 @@ XENDOMAINS_RESTORE=true
|
|
# Note that the script tries to be clever if both RESTORE and AUTO are
|
|
# set: It will first restore saved domains and then only start domains
|
|
# in AUTO which are not running yet.
|
|
-# Note that the name matching is somewhat fuzzy.
|
|
#
|
|
XENDOMAINS_AUTO=/etc/xen/auto
|
|
|
|
Index: xen-4.2.0-testing/tools/examples/xend-config.sxp
|
|
===================================================================
|
|
--- xen-4.2.0-testing.orig/tools/examples/xend-config.sxp
|
|
+++ xen-4.2.0-testing/tools/examples/xend-config.sxp
|
|
@@ -58,11 +58,12 @@
|
|
|
|
|
|
#(xend-http-server no)
|
|
-#(xend-unix-server no)
|
|
+(xend-unix-server yes)
|
|
#(xend-tcp-xmlrpc-server no)
|
|
#(xend-unix-xmlrpc-server yes)
|
|
+# Only enable xend-relocation-server on trusted networks as it lacks
|
|
+# encryption and authentication.
|
|
#(xend-relocation-server no)
|
|
-(xend-relocation-server yes)
|
|
#(xend-relocation-ssl-server no)
|
|
#(xend-udev-event-server no)
|
|
|
|
@@ -170,7 +171,12 @@
|
|
# two fake interfaces per guest domain. To do things like this, write
|
|
# yourself a wrapper script, and call network-bridge from it, as appropriate.
|
|
#
|
|
-(network-script network-bridge)
|
|
+# SuSE users note:
|
|
+# On openSUSE >= 11.1 and SLES >= 11, networks should be configured using
|
|
+# native platform tool - YaST. vif-bridge and qemu-ifup can be used to
|
|
+# connect vifs to the YaST-managed networks.
|
|
+#(network-script network-bridge)
|
|
+(network-script )
|
|
|
|
# The script used to control virtual interfaces. This can be overridden on a
|
|
# per-vif basis when creating a domain or a configuring a new vif. The
|
|
@@ -203,7 +209,7 @@
|
|
# dom0-min-mem is the lowest permissible memory level (in MB) for dom0.
|
|
# This is a minimum both for auto-ballooning (as enabled by
|
|
# enable-dom0-ballooning below) and for xm mem-set when applied to dom0.
|
|
-(dom0-min-mem 196)
|
|
+(dom0-min-mem 512)
|
|
|
|
# Whether to enable auto-ballooning of dom0 to allow domUs to be created.
|
|
# If enable-dom0-ballooning = no, dom0 will never balloon out.
|