Roger Pau Monne 9c114178ff libxl: limit bootloader execution in restricted mode ...

Introduce a timeout for bootloader execution when running in restricted mode.

Allow overwriting the default time out with an environment provided value.

This is part of XSA-443 / CVE-2023-34325

Signed-off-by: Roger Pau Monné <roger.pau@citrix.com>
Reviewed-by: Anthony PERARD <anthony.perard@citrix.com>

2023-10-11 06:36:50 +01:00

..

console

tools/console: Add escape argument to configure escape character

2023-07-27 09:47:33 +02:00

debugger

tools: Use new xc function for some xc_domain_getinfo() calls

2023-05-10 19:59:27 +01:00

examples

tools/examples: cleanup Makefile

2022-07-11 12:13:24 +02:00

firmware

rombios: Remove the use of egrep

2023-08-18 14:25:55 +01:00

flask

flask/label-pci: Allow specifying optional irq label

2023-03-14 10:46:00 +01:00

fuzz

x86emul: rework wrapping of libc functions in test and fuzzing harnesses

2023-08-18 15:04:28 +02:00

golang

libxl: arm: Add grant_usage parameter for virtio devices

2023-07-24 14:11:35 +02:00

helpers

tools: Make init-xenstore-domain use xc_domain_getinfolist()

2023-04-28 14:34:40 +01:00

hotplug

tools: Fix install.sh for systemd

2023-05-16 20:03:02 +01:00

include

libxl: add support for running bootloader in restricted mode

2023-10-11 06:36:50 +01:00

libacpi

LICENSES: Remove the use of deprecated SPDX tags

2023-05-09 10:37:29 +01:00

libfsimage

tools/libfsimage: Export a new function to preload all plugins

2023-10-11 06:36:50 +01:00

libs

libxl: limit bootloader execution in restricted mode

2023-10-11 06:36:50 +01:00

misc

tools/xenpvboot: remove as unable to convert to Python 3

2023-10-06 18:17:42 +01:00

ocaml

tools/oxenstored: Additional debugging commands

2023-08-24 19:55:08 +01:00

pygrub

tools/pygrub: Deprivilege pygrub

2023-10-11 06:36:50 +01:00

python

tools/python: convert setup.py to use setuptools if available

2023-09-20 20:53:58 +01:00

tests

x86emul: rework wrapping of libc functions in test and fuzzing harnesses

2023-08-18 15:04:28 +02:00

vchan

tools: Use new xc function for some xc_domain_getinfo() calls

2023-05-10 19:59:27 +01:00

xcutils

tools: Remove -Werror everywhere else

2022-10-14 16:17:41 +01:00

xenmon

tools: Make some callers of xc_domain_getinfo() use xc_domain_getinfolist()

2023-04-28 14:34:40 +01:00

xenpaging

tools: Modify single-domid callers of xc_domain_getinfolist()

2023-05-10 19:59:27 +01:00

xenpmd

tools: Remove -Werror everywhere else

2022-10-14 16:17:41 +01:00

xenstored

tools/xenstore: Avoid leaking memory in check_store

2023-09-29 10:50:37 +01:00

xentop

tools: Remove -Werror everywhere else

2022-10-14 16:17:41 +01:00

xentrace

tools/xentrace/xentrace_format: Add python 3 compatibility

2023-09-11 19:04:47 +01:00

xl

libxl: add support for running bootloader in restricted mode

2023-10-11 06:36:50 +01:00

xs-clients

tools/xenstore: move xenstored sources into dedicated directory

2023-08-23 19:10:37 +01:00

config.h.in

tools: Don't use distutils in configure or Makefile

2023-09-20 20:53:58 +01:00

configure

tools: Don't use distutils in configure or Makefile

2023-09-20 20:53:58 +01:00

configure.ac

tools: add configure option for libfsimage

2023-08-09 09:05:40 +02:00

cross-install

cross-install: Only apply in tools directory, and automatically wrap $INSTALL.

2008-08-30 08:36:02 +01:00

Makefile

tools/xenstore: move xenstored sources into dedicated directory

2023-08-23 19:10:37 +01:00

Rules.mk

tools: Use -s for python shebangs

2023-03-17 10:44:16 +00:00