[Qemu-devel] [PATCH 04/16] xen: restrict: use xentoolcore_restrict_all

2018-04-24 Thread Ian Jackson
And insist that it works. Drop individual use of xendevicemodel_restrict and xenforeignmemory_restrict. These are not actually effective in this version of qemu, because qemu has a large number of fds open onto various Xen control devices. The restriction arrangements are still not right, becaus

[Qemu-devel] [PATCH 04/16] xen: restrict: use xentoolcore_restrict_all

2018-04-19 Thread Ian Jackson
And insist that it works. Drop individual use of xendevicemodel_restrict and xenforeignmemory_restrict. These are not actually effective in this version of qemu, because qemu has a large number of fds open onto various Xen control devices. The restriction arrangements are still not right, becaus