George Dunlap ce2f426058 tools/dm_depriv: Add first cut RLIMITs ...

Limit the ability of a potentially compromised QEMU to consume system
resources.  Key limits:
 - RLIMIT_FSIZE (file size): 256KiB
 - RLIMIT_NPROC (after uid changes to a unique uid)

Probably unnecessary limits but why not:
 - RLIMIT_CORE: 0
 - RLIMIT_MSGQUEUE: 0
 - RLIMIT_LOCKS: 0
 - RLIMIT_MEMLOCK: 0

NB that we do not yet set RLIMIT_AS (total virtual memory) or
RLIMIT_NOFILES (number of open files), since these require more care
and/or more coordination with QEMU to implement.

Suggested-by: Ross Lagerwall <ross.lagerwall@citrix.com>
Signed-off-by: George Dunlap <george.dunlap@citrix.com>
Acked-by: Ian Jackson <ian.jackson@eu.citrix.com>
---
Changes since v4:
- Put global headers before local headers (sugg by Paul)
- Move #undif inside the braces (sugg by Paul)

Changes since v3:
- Align RLIMIT_ENTRY list for easier reading
- Fix wrong format string specifier
- Get rid of some trailing whitespace

Changes since v2:
- Use a macro to define rlimit entries
- Use RLIMIT_NLIMITS as an end-of-list marker, rather than -1
- Various style clean-ups

CC: Ian Jackson <ian.jackson@citrix.com>
CC: Wei Liu <wei.liu2@citrix.com>
CC: Anthony Perard <anthony.perard@citrix.com>

2018-11-06 15:41:25 +00:00

..

check-libxl-api-rules

libxl: enforce prohibitions of internal callers

2012-08-01 12:46:52 +01:00

check-xl-disk-parse

Revert "tools: remove blktap2 related code and documentation"

2016-09-08 16:15:59 +01:00

check-xl-vcpupin-parse

xl: test script for the cpumap parser (for vCPU pinning)

2013-12-09 15:20:12 +00:00

check-xl-vcpupin-parse.data-example

xl: test script for the cpumap parser (for vCPU pinning)

2013-12-09 15:20:12 +00:00

check-xl-vif-parse

libxl: fix vif rate parsing

2013-10-10 15:48:55 +01:00

CODING_STYLE

libxl: CODING_STYLE: Clarify line length limit to 75

2018-10-30 17:03:23 +00:00

flexarray.c

libxl: Have flexarray using the GC

2012-10-05 14:34:30 +01:00

flexarray.h

libxl: Add a comment about NOGC usage with flexarray

2012-10-08 11:45:29 +01:00

gentest.py

tools/libxl: Alter the use of rand() in testidl

2015-08-13 10:47:08 +01:00

gentypes.py

libxl/gentypes: fix generating array of enums

2017-10-04 11:09:46 +01:00

idl.py

libxl: introduce a way to mark fields as deprecated in the idl

2017-09-28 12:04:06 +01:00

idl.txt

libxl IDL: generate deep copy functions

2014-07-10 13:06:55 +01:00

libxl_9pfs.c

libxl: move libxl__device_from_ to LIBXL_DEFINE_DEVICE_FROM_TYPE

2018-01-25 11:35:21 +00:00

libxl_aoutils.c

tools/libxl: Drop dead code following calls to libxl__exec()

2015-11-24 16:16:34 +00:00

libxl_arch.h

libxl/arm: fix guest type conversion

2018-11-02 14:22:20 +00:00

libxl_arm_acpi.c

libxl/arm: Fix build on arm64 + acpi w/ gcc 8.2

2018-08-17 16:40:50 +01:00

libxl_arm_no_acpi.c

libxl/arm: Add the size of ACPI tables to maxmem

2016-09-30 11:47:27 +01:00

libxl_arm.c

libxl/arm: fix guest type conversion

2018-11-02 14:22:20 +00:00

libxl_arm.h

libxl/arm: Add the size of ACPI tables to maxmem

2016-09-30 11:47:27 +01:00

libxl_blktap2.c

Revert "tools: remove blktap2 related code and documentation"

2016-09-08 16:15:59 +01:00

libxl_bootloader.c

libxl: allow PVH guests to use a bootloader

2017-09-28 15:28:01 +01:00

libxl_checkpoint_device.c

libxl: remove list callback from device framework

2017-09-22 16:29:18 +01:00

libxl_colo_nic.c

libxl: use libxl__device_kind to get device XS entry

2018-01-25 11:35:14 +00:00

libxl_colo_proxy.c

libxl/colo: unified exit path for colo_proxy_checkpoint

2017-03-16 18:25:16 +00:00

libxl_colo_qdisk.c

libxl: Add Xen colo support for qemu-upstream colo code

2016-12-12 09:48:07 +00:00

libxl_colo_restore.c

libxl/libxl_qmp.c: Update COLO query replication status API

2017-03-20 15:27:53 +00:00

libxl_colo_save.c

libxl: remove list callback from device framework

2017-09-22 16:29:18 +01:00

libxl_colo.h

COLO-Proxy: Use socket to get checkpoint event.

2017-03-14 11:36:52 +00:00

libxl_console.c

libxl: move vkb device to libxl_vkb.c

2018-07-25 11:07:46 +01:00

libxl_convert_callout.c

tools/libxl: Make libxl__conversion_helper_abort() safe to use

2015-08-05 10:40:35 +01:00

libxl_cpuid.c

x86/spec-ctrl: CPUID/MSR definitions for L1D_FLUSH

2018-08-14 16:56:47 +01:00

libxl_cpupool.c

tools/libxl: Introduce LIBXL_CPUPOOL_POOLID_ANY

2017-02-16 12:47:12 +00:00

libxl_create.c

libxl/arm: fix guest type conversion

2018-11-02 14:22:20 +00:00

libxl_device.c

libxl: Specify format of inserted cdrom

2018-04-25 14:38:47 +02:00

libxl_disk.c

libxl: use libxl__device_kind to get device XS entry

2018-01-25 11:35:14 +00:00

libxl_dm.c

tools/dm_restrict: Unshare mount and IPC namespaces on Linux

2018-11-06 15:41:24 +00:00

libxl_dom_save.c

libxl_qmp: Tell QEMU about live migration or snapshot

2018-03-14 12:35:53 +00:00

libxl_dom_suspend.c

libxl_qmp: Tell QEMU about live migration or snapshot

2018-03-14 12:35:53 +00:00

libxl_dom.c

tools: libxl/xl: run NUMA placement even when an hard-affinity is set

2018-11-06 10:19:32 +00:00

libxl_domain.c

tools/xl: refuse to set number of vcpus to 0 via xl vcpu-set

2018-09-05 11:53:35 +01:00

libxl_event.c

libxl_event: Fix DEBUG prints

2018-07-30 14:46:32 +01:00

libxl_event.h

Various: Fix typos unkown', retreive' (detected by lintian)

2018-10-08 15:20:18 +01:00

libxl_exec.c

libxl: re-name libxl__xs_write() to libxl__xs_printf()...

2015-12-15 12:03:08 +00:00

libxl_flask.c

libxl: Correct license header on libxl_flask.c to be LGPL

2015-03-05 17:06:43 +00:00

libxl_fork.c

libxl: Do not call assert() in signal handlers

2015-10-23 14:32:45 +01:00

libxl_freebsd.c

tools/dm_restrict: Unshare mount and IPC namespaces on Linux

2018-11-06 15:41:24 +00:00

libxl_genid.c

libxl: constify copy and length calculation functions

2016-07-12 12:49:41 +01:00

libxl_internal.c

build/printf: fix incorrect format specifiers

2017-02-17 16:09:38 +01:00

libxl_internal.h

tools/dm_restrict: Unshare mount and IPC namespaces on Linux

2018-11-06 15:41:24 +00:00

libxl_json.c

libxl_json: libxl__json_object_to_json

2018-08-21 12:16:02 +01:00

libxl_json.h

libxl_json: Enable yajl_allow_trailing_garbage

2018-08-21 12:16:02 +01:00

libxl_libfdt_compat.c

tools/libxl: Check if fdt_{first,next}_subnode are present in libfdt

2015-05-21 14:59:17 +01:00

libxl_libfdt_compat.h

xen/arm: Propagate clock-frequency to DOMU if present in the DT timer node

2015-06-25 10:59:08 +01:00

libxl_linux.c

tools/dm_depriv: Add first cut RLIMITs

2018-11-06 15:41:25 +00:00

libxl_mem.c

libxl: don't set PoD target for PV guests

2018-09-07 15:01:39 +01:00

libxl_netbsd.c

tools/dm_restrict: Unshare mount and IPC namespaces on Linux

2018-11-06 15:41:24 +00:00

libxl_netbuffer.c

libxl: use libxl__device_kind to get device XS entry

2018-01-25 11:35:14 +00:00

libxl_nic.c

libxl: move ibxl_devid_to_device_... to LIBXL_DEFINE_DEVID_TO_DEVICE

2018-01-25 11:35:21 +00:00

libxl_no_colo.c

libxl/libxl_no_colo.c: used LOG*D functions

2016-12-03 15:57:34 +00:00

libxl_no_convert_callout.c

tools/libxl: Infrastructure to convert a legacy stream

2015-07-15 11:22:53 +01:00

libxl_noblktap2.c

Revert "tools: remove blktap2 related code and documentation"

2016-09-08 16:15:59 +01:00

libxl_nocpuid.c

libxl: constify src parameter of libxl_nocpuid.c:libxl_cpuid_policy_list_copy

2016-07-13 14:24:02 +01:00

libxl_nonetbuffer.c

tools/libxl: rename remus device to checkpoint device

2016-02-26 15:14:47 +00:00

libxl_numa.c

libxl: initialise nr_dom_vcpus to fix 4a6070ea9

2016-10-24 11:53:20 +01:00

libxl_osdeps.h

tools: include sys/sysmacros.h on Linux

2017-03-15 10:22:33 +00:00

libxl_paths.c

tools: provide --with-system-ipxe

2018-07-16 16:09:14 +01:00

libxl_pci.c

libxl: keep assigned pci devices across domain reboots

2018-09-21 17:13:00 +01:00

libxl_psr.c

tools: implement new generic set value interface and MBA set value command

2018-01-18 11:32:51 +00:00

libxl_pvcalls.c

xl/libxl: add pvcalls support

2018-03-30 12:51:55 +01:00

libxl_qmp.c

Various: Fix typos unkown', retreive' (detected by lintian)

2018-10-08 15:20:18 +01:00

libxl_remus_disk_drbd.c

setup and control colo proxy on primary side

2016-04-01 14:33:16 +01:00

libxl_remus.c

libxl/libxl_remus.c: used LOG*D functions

2016-12-03 15:57:34 +00:00

libxl_save_callout.c

Tidy libxc xc_domain_save

2017-09-26 11:10:08 +01:00

libxl_save_helper.c

Tidy libxc xc_domain_save

2017-09-26 11:10:08 +01:00

libxl_save_msgs_gen.pl

tools/libxc: Fix domid parameter types

2017-10-11 12:20:17 +01:00

libxl_sched.c

tools: libxl/xl: allow to get/set Credit1's vcpu_migration_delay

2018-03-21 16:24:58 +00:00

libxl_sr_stream_format.h

docs/libxl: Introduce CHECKPOINT_CONTEXT to support migration v2 colo streams

2016-04-01 11:07:28 +08:00

libxl_stream_read.c

libxl: remove device model "none" support from stream functions

2017-09-28 15:28:02 +01:00

libxl_stream_write.c

libxl: remove device model "none" support from stream functions

2017-09-28 15:28:02 +01:00

libxl_test_fdevent.c

libxl: event tests: Provide libxl_test_fdevent

2015-07-15 11:40:43 +01:00

libxl_test_fdevent.h

libxl: event tests: Provide libxl_test_fdevent

2015-07-15 11:40:43 +01:00

libxl_test_timedereg.c

libxl: event tests: test_timedereg: Fix rc handling

2015-07-15 11:40:44 +01:00

libxl_test_timedereg.h

libxl: events: timedereg internal unit test

2014-02-06 14:21:30 +00:00

libxl_tmem.c

libxl: carve out tmem specific functions from libxl.c

2017-02-13 10:59:19 +00:00

libxl_types_internal.idl

libxl: add PV sound device

2018-07-10 08:47:21 +01:00

libxl_types.idl

tools/libxl: Deprecate PV fields kernel, ramdisk, cmdline

2018-10-03 15:57:46 +01:00

libxl_usb.c

libxl: use libxl__device_kind in LIBXL_DEFINE_UPDATE_DEVID

2018-01-25 11:35:19 +00:00

libxl_utils.c

libxl: Add libxl__prepare_sockaddr_un() helper

2018-08-21 11:57:50 +01:00

libxl_utils.h

libxl: vkb add list and info functions

2018-07-25 11:08:19 +01:00

libxl_uuid.c

libxl: replace the usage of uuid_t with a char array

2016-04-08 15:07:17 +01:00

libxl_uuid.h

libxl: fix old style declarations

2016-04-20 14:34:04 +01:00

libxl_vdispl.c

libxl/xl: rename id to unique-id in vdispl xen store

2018-07-10 08:46:10 +01:00

libxl_vkb.c

libxl: vkb add extended parameters

2018-07-25 11:08:22 +01:00

libxl_vnuma.c

libxl/libxl_vnuma.c: used LOG*D functions

2016-12-03 15:57:35 +00:00

libxl_vsnd.c

libxl/vsnd: add missing error checks

2018-07-10 15:17:43 +01:00

libxl_vtpm.c

libxl: move libxl__device_from_ to LIBXL_DEFINE_DEVICE_FROM_TYPE

2018-01-25 11:35:21 +00:00

libxl_x86_acpi.c

libxl: fix memory map reported to PVH guests

2018-04-23 14:31:05 +01:00

libxl_x86_acpi.h

libxl/acpi: Build ACPI tables for HVMlite guests

2016-09-28 14:32:05 +01:00

libxl_x86.c

libxl/arm: fix guest type conversion

2018-11-02 14:22:20 +00:00

libxl_xshelp.c

libxl: don't segfault when creating domain with invalid pvusb device

2017-02-08 15:00:02 +00:00

libxl.c

xen: decouple HVM and IOMMU capabilities

2018-09-13 17:03:32 +01:00

libxl.h

xen: decouple HVM and IOMMU capabilities

2018-09-13 17:03:32 +01:00

libxlu_cfg_i.h

libxlu: record location when parsing values

2015-03-18 12:05:35 +00:00

libxlu_cfg_l.c

libxl: update flex output files for DSA 3653-2

2016-09-05 11:53:16 +01:00

libxlu_cfg_l.h

tools: Update libxl flex outputs to Flex from Jessie.

2015-10-22 16:05:39 +01:00

libxlu_cfg_l.l

libxl: regenerate libxlu cfg parser after 9e14c516b6

2013-04-12 08:55:18 +01:00

libxlu_cfg_y.c

tools: Update libxl flex outputs to Flex from Jessie.

2015-10-22 16:05:39 +01:00

libxlu_cfg_y.h

tools: Update libxl flex outputs to Flex from Jessie.

2015-10-22 16:05:39 +01:00

libxlu_cfg_y.y

libxlu: record location when parsing values

2015-03-18 12:05:35 +00:00

libxlu_cfg.c

libxlu_cfg: reject unknown characters following '\'

2016-02-17 12:34:33 -05:00

libxlu_disk_i.h

libxl: support custom block hotplug scripts

2012-08-06 12:28:03 +01:00

libxlu_disk_l.c

libxl: QED disks support

2016-12-13 20:25:25 +00:00

libxlu_disk_l.h

libxl: QED disks support

2016-12-13 20:25:25 +00:00

libxlu_disk_l.l

libxl: QED disks support

2016-12-13 20:25:25 +00:00

libxlu_disk.c

libxl: properly set default of discard_enable

2014-06-17 10:08:57 +01:00

libxlu_internal.h

libxlu: avoid having two definitions of XLU_ConfigList

2015-03-19 10:35:12 +00:00

libxlu_pci.c

libxlu: properly free buffer in PCI related functions

2015-07-29 15:26:56 +01:00

libxlu_vif.c

libxl: fix vif rate parsing

2013-10-10 15:48:55 +01:00

libxlutil.h

tools: parse to enable new rdm policy parameters

2015-07-23 13:45:26 +01:00

Makefile

libxl: move vkb device to libxl_vkb.c

2018-07-25 11:07:46 +01:00

osdeps.c

libxl: fixup incorrect indentation

2011-10-12 16:21:32 +01:00

test_common.c

libxl: event tests: Provide miniature poll machinery

2015-07-15 11:40:43 +01:00

test_common.h

libxl: event tests: Provide miniature poll machinery

2015-07-15 11:40:43 +01:00

test_fdderegrace.c

libxl: event tests: Fix =' vs ==' in fdderegrace

2015-07-15 16:02:33 +01:00

test_timedereg.c

libxl: events: timedereg internal unit test

2014-02-06 14:21:30 +00:00

xenlight.pc.in

Fix broken package config file xenlight.pc.in

2017-05-12 11:05:08 +01:00

xlutil.pc.in

tools: adapt xenlight.pc and xlutil.pc to new pkg-config scheme

2017-03-14 14:13:14 +00:00