19d8f590f0
xen.spec - bsc#945167 - Running command ’ xl pci-assignable-add 03:10.1’ secondly show errors 55f7f9d2-libxl-slightly-refine-pci-assignable-add-remove-handling.patch - Upstream patches from Jan 55f2e438-x86-hvm-fix-saved-pmtimer-and-hpet-values.patch 55f9345b-x86-MSI-fail-if-no-hardware-support.patch 5604f239-x86-PV-properly-populate-descriptor-tables.patch 5604f2e6-vt-d-fix-IM-bit-mask-and-unmask-of-FECTL_REG.patch 560a4af9-x86-EPT-tighten-conditions-of-IOMMU-mapping-updates.patch 560a7c36-x86-p2m-pt-delay-freeing-of-intermediate-page-tables.patch 560a7c53-x86-p2m-pt-ignore-pt-share-flag-for-shadow-mode-guests.patch 560bd926-credit1-fix-tickling-when-it-happens-from-a-remote-pCPU.patch 560e6d34-x86-p2m-pt-tighten-conditions-of-IOMMU-mapping-updates.patch - bsc#941074 - VmError: Device 51728 (vbd) could not be connected. Hotplug scripts not working. hotplug-Linux-block-performance-fix.patch - bsc#947165 - VUL-0: CVE-2015-7311: xen: libxl fails to honour readonly flag on disks with qemu-xen (xsa-142) CVE-2015-7311-xsa142.patch OBS-URL: https://build.opensuse.org/package/show/Virtualization/xen?expand=0&rev=378
51 lines
2.5 KiB
Diff
51 lines
2.5 KiB
Diff
From 07ca00703f76ad392eda5ee52cce1197cf49c30a Mon Sep 17 00:00:00 2001
|
|
From: Stefano Stabellini <stefano.stabellini@eu.citrix.com>
|
|
Subject: [PATCH v2.1 for-4.5] libxl: handle read-only drives with qemu-xen
|
|
|
|
The current libxl code doesn't deal with read-only drives at all.
|
|
|
|
Upstream QEMU and qemu-xen only support read-only cdrom drives: make
|
|
sure to specify "readonly=on" for cdrom drives and return error in case
|
|
the user requested a non-cdrom read-only drive.
|
|
|
|
This is XSA-142, discovered by Lin Liu
|
|
(https://bugzilla.redhat.com/show_bug.cgi?id=1257893).
|
|
|
|
Signed-off-by: Stefano Stabellini <stefano.stabellini@eu.citrix.com>
|
|
|
|
Backport to Xen 4.5 and earlier, apropos of report and review from
|
|
Michael Young.
|
|
|
|
Signed-off-by: Ian Jackson <ian.jackson@eu.citrix.com>
|
|
---
|
|
tools/libxl/libxl_dm.c | 13 +++++++++----
|
|
1 file changed, 9 insertions(+), 4 deletions(-)
|
|
|
|
Index: xen-4.5.1-testing/tools/libxl/libxl_dm.c
|
|
===================================================================
|
|
--- xen-4.5.1-testing.orig/tools/libxl/libxl_dm.c
|
|
+++ xen-4.5.1-testing/tools/libxl/libxl_dm.c
|
|
@@ -812,13 +812,18 @@ static char ** libxl__build_device_model
|
|
if (disks[i].is_cdrom) {
|
|
if (disks[i].format == LIBXL_DISK_FORMAT_EMPTY)
|
|
drive = libxl__sprintf
|
|
- (gc, "if=ide,index=%d,media=cdrom,cache=writeback,id=ide-%i",
|
|
- disk, dev_number);
|
|
+ (gc, "if=ide,index=%d,readonly=%s,media=cdrom,cache=writeback,id=ide-%i",
|
|
+ disk, disks[i].readwrite ? "off" : "on", dev_number);
|
|
else
|
|
drive = libxl__sprintf
|
|
- (gc, "file=%s,if=ide,index=%d,media=cdrom,format=%s,cache=writeback,id=ide-%i",
|
|
- disks[i].pdev_path, disk, format, dev_number);
|
|
+ (gc, "file=%s,if=ide,index=%d,readonly=%s,media=cdrom,format=%s,cache=writeback,id=ide-%i",
|
|
+ disks[i].pdev_path, disk, disks[i].readwrite ? "off" : "on", format, dev_number);
|
|
} else {
|
|
+ if (!disks[i].readwrite) {
|
|
+ LIBXL__LOG(ctx, LIBXL__LOG_ERROR, "qemu-xen doesn't support read-only disk drivers");
|
|
+ return NULL;
|
|
+ }
|
|
+
|
|
if (disks[i].format == LIBXL_DISK_FORMAT_EMPTY) {
|
|
LIBXL__LOG(ctx, LIBXL__LOG_WARNING, "cannot support"
|
|
" empty disk format for %s", disks[i].vdev);
|