Jim Fehlig 803aea1dd8 tools: Restrict configuration of qemu processes ...

Commit 6ef823fd added '-nodefaults' to the qemu args created by
libxl, which is a good step in restricting qemu's default
configuration. This change takes another step by adding
-no-user-config, which ignores any user-provided config files in
sysconfdir. Together, -nodefaults and -no-user-config allow Xen
to avoid unkown and uncontrolled qemu configuration.

Both options are also added to the qemu invocation in the
xen-qemu-dom0-disk-backend systemd service file.

Signed-off-by: Jim Fehlig <jfehlig@suse.com>
Acked-by: Wei Liu <wei.liu2@citrix.com>

2016-03-24 14:35:05 +00:00

..

bash-completion

libxl: remove shebang from bash_completion helper

2012-02-07 17:18:10 +00:00

check-libxl-api-rules

libxl: enforce prohibitions of internal callers

2012-08-01 12:46:52 +01:00

check-xl-disk-parse

libxl: update check-xl-disk-parse

2015-12-10 12:38:42 +00:00

check-xl-vcpupin-parse

xl: test script for the cpumap parser (for vCPU pinning)

2013-12-09 15:20:12 +00:00

check-xl-vcpupin-parse.data-example

xl: test script for the cpumap parser (for vCPU pinning)

2013-12-09 15:20:12 +00:00

check-xl-vif-parse

libxl: fix vif rate parsing

2013-10-10 15:48:55 +01:00

CODING_STYLE

libxl: implement libxl__xs_mknod using XS_WRITE rather than XS_MKDIR

2015-12-01 12:02:13 +00:00

flexarray.c

libxl: Have flexarray using the GC

2012-10-05 14:34:30 +01:00

flexarray.h

libxl: Add a comment about NOGC usage with flexarray

2012-10-08 11:45:29 +01:00

gentest.py

tools/libxl: Alter the use of rand() in testidl

2015-08-13 10:47:08 +01:00

gentypes.py

gentypes: make dispose function tolerate NULL

2015-03-02 17:05:39 +00:00

idl.py

libxl IDL: generate deep copy functions

2014-07-10 13:06:55 +01:00

idl.txt

libxl IDL: generate deep copy functions

2014-07-10 13:06:55 +01:00

libxl_aoutils.c

tools/libxl: Drop dead code following calls to libxl__exec()

2015-11-24 16:16:34 +00:00

libxl_arch.h

libxl: switch HVM domain building to use xc_dom_* helpers

2015-10-08 12:22:45 +01:00

libxl_arm.c

libxl: switch HVM domain building to use xc_dom_* helpers

2015-10-08 12:22:45 +01:00

libxl_blktap2.c

tools: libxl: free devpath on failure in libxl__blktap_devpath

2016-02-16 17:37:11 +00:00

libxl_bootloader.c

libxl: re-name libxl__xs_write() to libxl__xs_printf()...

2015-12-15 12:03:08 +00:00

libxl_checkpoint_device.c

tools/libxl: seperate device init/cleanup from checkpoint device layer

2016-02-26 15:14:47 +00:00

libxl_convert_callout.c

tools/libxl: Make libxl__conversion_helper_abort() safe to use

2015-08-05 10:40:35 +01:00

libxl_cpuid.c

tools/libxl/libxl_cpuid.c: Fix leak of resstr on error path

2015-03-18 12:06:54 +00:00

libxl_create.c

libxl: domcreate: support pvusb in configuration file

2016-03-18 12:17:22 +00:00

libxl_device.c

libxl: domcreate: support pvusb in configuration file

2016-03-18 12:17:22 +00:00

libxl_dm.c

tools: Restrict configuration of qemu processes

2016-03-24 14:35:05 +00:00

libxl_dom_save.c

libxl: initialise rc in libxl__domain_save error path

2016-02-28 16:03:51 -05:00

libxl_dom_suspend.c

libxl/save: Refactor libxl__domain_suspend_state

2016-02-26 14:27:12 +00:00

libxl_dom.c

x86/hvm/viridian: enable APIC assist enlightenment

2016-03-18 15:22:36 +01:00

libxl_event.c

libxenevtchn: rename evtchn_port_or_errot_t as xenevtchn_port...

2016-02-04 15:19:30 +00:00

libxl_event.h

libxl: Fix doc comment ref to DOMAIN_DEATH

2016-01-04 17:41:35 +00:00

libxl_exec.c

libxl: re-name libxl__xs_write() to libxl__xs_printf()...

2015-12-15 12:03:08 +00:00

libxl_flask.c

libxl: Correct license header on libxl_flask.c to be LGPL

2015-03-05 17:06:43 +00:00

libxl_fork.c

libxl: Do not call assert() in signal handlers

2015-10-23 14:32:45 +01:00

libxl_freebsd.c

libxl: Add interface for querying hypervisor about PCI topology

2015-05-13 15:03:38 +01:00

libxl_genid.c

libxl: re-name libxl__xs_write() to libxl__xs_printf()...

2015-12-15 12:03:08 +00:00

libxl_internal.c

tools: libxl: Simplify logic in libxl__realloc

2016-02-18 18:22:12 +00:00

libxl_internal.h

libxl: domcreate: support pvusb in configuration file

2016-03-18 12:17:22 +00:00

libxl_json.c

tools: libxl: Remove unnecessary trailing \n from log messages.

2015-08-13 11:01:23 +01:00

libxl_json.h

libxl: allow a generation ID to be specified at domain creation

2014-06-27 15:55:57 +01:00

libxl_libfdt_compat.c

tools/libxl: Check if fdt_{first,next}_subnode are present in libfdt

2015-05-21 14:59:17 +01:00

libxl_libfdt_compat.h

xen/arm: Propagate clock-frequency to DOMU if present in the DT timer node

2015-06-25 10:59:08 +01:00

libxl_linux.c

tools: libxl: Remove unnecessary trailing \n from log messages.

2015-08-13 11:01:23 +01:00

libxl_netbsd.c

libxl: Remove linux udev rules

2015-07-07 15:50:12 +01:00

libxl_netbuffer.c

tools/libxl: move remus state into a seperate structure

2016-02-26 15:14:47 +00:00

libxl_no_convert_callout.c

tools/libxl: Infrastructure to convert a legacy stream

2015-07-15 11:22:53 +01:00

libxl_noblktap2.c

libxl: fix cleanup of tap devices in libxl__device_destroy

2012-08-03 12:25:29 +01:00

libxl_nocpuid.c

libxl: copy function for builtin types

2014-07-10 13:06:55 +01:00

libxl_nonetbuffer.c

tools/libxl: rename remus device to checkpoint device

2016-02-26 15:14:47 +00:00

libxl_numa.c

libxl: bail from placement on non-NUMA boxes

2014-05-02 13:34:35 +01:00

libxl_osdeps.h

libxl: add pvusb API

2016-03-18 12:17:22 +00:00

libxl_paths.c

Use configure --libexecdir=BASEDIR to set LIBEXEC

2014-10-06 16:59:56 +01:00

libxl_pci.c

libxl: re-name libxl__xs_write() to libxl__xs_printf()...

2015-12-15 12:03:08 +00:00

libxl_psr.c

tools & docs: add tools and docs support for Intel CDP

2015-10-22 16:15:09 +01:00

libxl_pvusb.c

libxl: add pvusb API

2016-03-18 12:17:22 +00:00

libxl_qmp.c

libxl: qmp: ensure qmp read buffer is NULL terminated

2016-03-01 16:17:36 +00:00

libxl_remus_disk_drbd.c

tools/libxl: move remus state into a seperate structure

2016-02-26 15:14:47 +00:00

libxl_remus.c

tools/libxl: seperate device init/cleanup from checkpoint device layer

2016-02-26 15:14:47 +00:00

libxl_save_callout.c

migration/save: pass checkpointed_stream from libxl to libxc

2016-02-26 15:14:46 +00:00

libxl_save_helper.c

tools: change checkpointed_stream's type from int to xc_migration_stream_t

2016-03-17 13:52:21 +00:00

libxl_save_msgs_gen.pl

tools/libxl: Drop all knowledge of toolstack callbacks

2015-07-15 11:22:54 +01:00

libxl_sr_stream_format.h

tools/libxl: Drop all legacy "toolstack" record infrastructure

2015-08-05 10:46:46 +01:00

libxl_stream_read.c

tools/libxl: introduce enum type libxl_checkpointed_stream

2016-02-26 15:14:46 +00:00

libxl_stream_write.c

migration/save: pass checkpointed_stream from libxl to libxc

2016-02-26 15:14:46 +00:00

libxl_test_fdevent.c

libxl: event tests: Provide libxl_test_fdevent

2015-07-15 11:40:43 +01:00

libxl_test_fdevent.h

libxl: event tests: Provide libxl_test_fdevent

2015-07-15 11:40:43 +01:00

libxl_test_timedereg.c

libxl: event tests: test_timedereg: Fix rc handling

2015-07-15 11:40:44 +01:00

libxl_test_timedereg.h

libxl: events: timedereg internal unit test

2014-02-06 14:21:30 +00:00

libxl_types_internal.idl

libxl: add pvusb API

2016-03-18 12:17:22 +00:00

libxl_types.idl

x86/hvm/viridian: enable APIC assist enlightenment

2016-03-18 15:22:36 +01:00

libxl_utils.c

libxl: add pvusb API

2016-03-18 12:17:22 +00:00

libxl_utils.h

libxl: add pvusb API

2016-03-18 12:17:22 +00:00

libxl_uuid.c

libxl: add support for FreeBSD uuid implementation

2014-07-02 15:53:12 +01:00

libxl_uuid.h

tools/libxl: Fix building against libxl for LIBXL_API_VERSION < 0x040500

2014-10-27 10:10:25 +00:00

libxl_vnuma.c

libxl: switch HVM domain building to use xc_dom_* helpers

2015-10-08 12:22:45 +01:00

libxl_x86.c

libxl: allow the creation of HVM domains without a device model.

2015-12-15 13:25:44 +00:00

libxl_xshelp.c

libxl: re-implement libxl__xs_printf()

2015-12-15 12:05:19 +00:00

libxl.c

libxl: add pvusb API

2016-03-18 12:17:22 +00:00

libxl.h

x86/hvm/viridian: enable APIC assist enlightenment

2016-03-18 15:22:36 +01:00

libxlu_cfg_i.h

libxlu: record location when parsing values

2015-03-18 12:05:35 +00:00

libxlu_cfg_l.c

tools: Update libxl flex outputs to Flex from Jessie.

2015-10-22 16:05:39 +01:00

libxlu_cfg_l.h

tools: Update libxl flex outputs to Flex from Jessie.

2015-10-22 16:05:39 +01:00

libxlu_cfg_l.l

libxl: regenerate libxlu cfg parser after 9e14c516b6

2013-04-12 08:55:18 +01:00

libxlu_cfg_y.c

tools: Update libxl flex outputs to Flex from Jessie.

2015-10-22 16:05:39 +01:00

libxlu_cfg_y.h

tools: Update libxl flex outputs to Flex from Jessie.

2015-10-22 16:05:39 +01:00

libxlu_cfg_y.y

libxlu: record location when parsing values

2015-03-18 12:05:35 +00:00

libxlu_cfg.c

libxlu_cfg: reject unknown characters following '\'

2016-02-17 12:34:33 -05:00

libxlu_disk_i.h

libxl: support custom block hotplug scripts

2012-08-06 12:28:03 +01:00

libxlu_disk_l.c

tools: Update libxl flex outputs to Flex from Jessie.

2015-10-22 16:05:39 +01:00

libxlu_disk_l.h

tools: Update libxl flex outputs to Flex from Jessie.

2015-10-22 16:05:39 +01:00

libxlu_disk_l.l

libxl: add option for discard support to xl disk configuration

2014-05-19 12:50:27 +01:00

libxlu_disk.c

libxl: properly set default of discard_enable

2014-06-17 10:08:57 +01:00

libxlu_internal.h

libxlu: avoid having two definitions of XLU_ConfigList

2015-03-19 10:35:12 +00:00

libxlu_pci.c

libxlu: properly free buffer in PCI related functions

2015-07-29 15:26:56 +01:00

libxlu_vif.c

libxl: fix vif rate parsing

2013-10-10 15:48:55 +01:00

libxlutil.h

tools: parse to enable new rdm policy parameters

2015-07-23 13:45:26 +01:00

Makefile

libxl: add pvusb API

2016-03-18 12:17:22 +00:00

osdeps.c

libxl: fixup incorrect indentation

2011-10-12 16:21:32 +01:00

test_common.c

libxl: event tests: Provide miniature poll machinery

2015-07-15 11:40:43 +01:00

test_common.h

libxl: event tests: Provide miniature poll machinery

2015-07-15 11:40:43 +01:00

test_fdderegrace.c

libxl: event tests: Fix =' vs ==' in fdderegrace

2015-07-15 16:02:33 +01:00

test_timedereg.c

libxl: events: timedereg internal unit test

2014-02-06 14:21:30 +00:00

xenlight.pc.in.in

libxl: provide xenlight.pc

2015-01-19 15:32:17 +00:00

xl_cmdimpl.c

xl: add pvusb commands

2016-03-18 12:17:22 +00:00

xl_cmdtable.c

xl: add pvusb commands

2016-03-18 12:17:22 +00:00

xl_sxp.c

xl: fix migration failure with xl migrate --debug

2014-12-02 13:48:54 +00:00

xl.c

xl: convert main() exit codes to EXIT_[SUCCESS|FAILURE]

2015-11-03 17:03:03 +00:00

xl.h

xl: add pvusb commands

2016-03-18 12:17:22 +00:00

xlutil.pc.in.in

libxl: provide xlutil.pc

2015-01-27 16:34:05 +00:00