Roger Pau Monne 46d00dbf4c libxl: limit bootloader execution in restricted mode ...

Introduce a timeout for bootloader execution when running in restricted mode.

Allow overwriting the default time out with an environment provided value.

This is part of XSA-443 / CVE-2023-34325

Signed-off-by: Roger Pau Monné <roger.pau@citrix.com>
Reviewed-by: Anthony PERARD <anthony.perard@citrix.com>
(cherry picked from commit 9c114178ff)

2023-09-29 15:54:00 +02:00

..

console

tools: Remove -Werror everywhere else

2022-10-14 16:17:41 +01:00

debugger

tools: Remove the use of K&R functions

2023-07-21 08:23:19 +02:00

examples

tools/examples: cleanup Makefile

2022-07-11 12:13:24 +02:00

firmware

rombios: Remove the use of egrep

2023-08-22 13:43:05 +01:00

flask

xen/flask: Wire up XEN_DOMCTL_{get,set}_paging_mempool_size

2022-11-21 16:12:41 +00:00

fuzz

x86emul: rework wrapping of libc functions in test and fuzzing harnesses

2023-08-22 13:43:05 +01:00

golang

x86/hvm: Revert per-domain APIC acceleration support

2022-11-17 16:51:51 +00:00

helpers

tools/xenstore: make the internal memory data base the default

2022-11-01 13:05:44 +00:00

hotplug

tools/hotplug: fix systemd unit dependencies

2022-11-09 10:48:59 +01:00

include

libxl: change the type of libxl_cpuid_policy_list

2023-08-08 16:02:17 +01:00

libacpi

libacpi: fix PCI hotplug AML

2023-03-21 13:47:52 +01:00

libfsimage

tools/libfsimage: Export a new function to preload all plugins

2023-09-27 16:29:27 +01:00

libs

libxl: limit bootloader execution in restricted mode

2023-09-29 15:54:00 +02:00

misc

x86/spec-ctrl: Enumerations for Gather Data Sampling

2023-08-08 16:02:17 +01:00

ocaml

x86/sysctl: Retrofit XEN_SYSCTL_cpu_featureset_{pv,hvm}_max

2023-08-08 16:02:17 +01:00

pygrub

tools/pygrub: Deprivilege pygrub

2023-09-27 16:29:27 +01:00

python

tools/python: change 's#' size type for Python >= 3.10

2023-03-21 13:43:44 +01:00

tests

x86emul: rework wrapping of libc functions in test and fuzzing harnesses

2023-08-22 13:43:05 +01:00

vchan

tools/vchan: Fix -Wsingle-bit-bitfield-constant-conversion

2023-08-22 14:36:53 +01:00

xcutils

tools: Remove -Werror everywhere else

2022-10-14 16:17:41 +01:00

xenmon

tools/xenmon: Fix xenmon.py for with python3.x

2023-03-21 13:44:04 +01:00

xenpaging

tools: Remove -Werror everywhere else

2022-10-14 16:17:41 +01:00

xenpmd

tools: Remove -Werror everywhere else

2022-10-14 16:17:41 +01:00

xenstore

tools/xenstored: domain_entry_fix(): Handle conflicting transaction

2023-09-27 16:29:27 +01:00

xentop

tools: Remove -Werror everywhere else

2022-10-14 16:17:41 +01:00

xentrace

xenalyze: Handle start-of-day ->RUNNING transitions

2023-09-05 08:47:14 +02:00

xl

libxl: use the cpuid feature names from cpufeatureset.h

2023-08-08 16:02:17 +01:00

config.h.in

tools: drop bogus and obsolete ptyfuncs.m4

2023-08-08 12:29:34 +01:00

configure

tools: drop bogus and obsolete ptyfuncs.m4

2023-08-08 12:29:34 +01:00

configure.ac

tools: drop bogus and obsolete ptyfuncs.m4

2023-08-08 12:29:34 +01:00

cross-install

cross-install: Only apply in tools directory, and automatically wrap $INSTALL.

2008-08-30 08:36:02 +01:00

Makefile

tools: Fix build with recent QEMU, use "--enable-trace-backends"

2023-02-07 16:57:22 +01:00

Rules.mk

Turn off debug by default

2022-12-01 13:54:04 +00:00