On Tue, 30 Jun 2015, Ian Campbell wrote:
#
> On Tue, 2015-06-30 at 11:46 +0100, Stefano Stabellini wrote:
> > I guess I could add a constant to libxl.h and use it in both libxl and
> > xl?
>
> Yuk. I'd be more inclined to just drop the domain-name-specific user
> functionality and leave just the
On Tue, 2015-06-30 at 11:46 +0100, Stefano Stabellini wrote:
> I guess I could add a constant to libxl.h and use it in both libxl and
> xl?
Yuk. I'd be more inclined to just drop the domain-name-specific user
functionality and leave just the per-domid one and catch all fallback.
Ian.
_
On Tue, 30 Jun 2015, Ian Campbell wrote:
> On Mon, 2015-06-29 at 18:06 +0100, Stefano Stabellini wrote:
> > On Thu, 25 Jun 2015, Ian Campbell wrote:
> > > On Mon, 2015-06-01 at 17:46 +0100, Stefano Stabellini wrote:
> > > > Try to use "xen-qemudepriv-$domname" first, then
> > > > "xen-qemudepriv-do
On Mon, 2015-06-29 at 18:06 +0100, Stefano Stabellini wrote:
> On Thu, 25 Jun 2015, Ian Campbell wrote:
> > On Mon, 2015-06-01 at 17:46 +0100, Stefano Stabellini wrote:
> > > Try to use "xen-qemudepriv-$domname" first, then
> > > "xen-qemudepriv-domid$domid", finally "xen-qemudepriv-shared" and roo
On Thu, 25 Jun 2015, Ian Campbell wrote:
> On Mon, 2015-06-01 at 17:46 +0100, Stefano Stabellini wrote:
> > Try to use "xen-qemudepriv-$domname" first, then
> > "xen-qemudepriv-domid$domid", finally "xen-qemudepriv-shared" and root
> > if everything else fails.
> >
> > The uids need to be manually
On Mon, 2015-06-01 at 17:46 +0100, Stefano Stabellini wrote:
> Try to use "xen-qemudepriv-$domname" first, then
> "xen-qemudepriv-domid$domid", finally "xen-qemudepriv-shared" and root
> if everything else fails.
>
> The uids need to be manually created by the user or, more likely, by the
> xen pa
Try to use "xen-qemudepriv-$domname" first, then
"xen-qemudepriv-domid$domid", finally "xen-qemudepriv-shared" and root
if everything else fails.
The uids need to be manually created by the user or, more likely, by the
xen package maintainer.
To actually secure QEMU when running in Dom0, we need