Andrew Cooper ba52b3b624 tools/xl: Open xldevd.log with O_CLOEXEC ...

`xl devd` has been observed leaking /var/log/xldevd.log into children.

Note this is specifically safe; dup2() leaves O_CLOEXEC disabled on newfd, so
after setting up stdout/stderr, it's only the logfile fd which will close on
exec().

Link: https://github.com/QubesOS/qubes-issues/issues/8292
Reported-by: Demi Marie Obenour <demi@invisiblethingslab.com>
Signed-off-by: Andrew Cooper <andrew.cooper3@citrix.com>
Reviewed-by: Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com>
Reviewed-by: Demi Marie Obenour <demi@invisiblethingslab.com>
Acked-by: Anthony PERARD <anthony.perard@vates.tech>
Release-Acked-by: Oleksii Kurochko <oleksii.kurochko@gmail.com>

2024-06-24 16:22:59 +01:00

..

bash-completion

tools/xl: use proper name for bash_completion file

2021-01-22 14:28:44 +00:00

check-xl-disk-parse

tools/libxl: report trusted backend status to frontends

2022-07-05 14:16:26 +02:00

check-xl-vcpupin-parse

tools/xl: fix vif and vcpupin parse tests

2022-04-11 12:33:02 +02:00

check-xl-vcpupin-parse.data-example

tools/libxl: move xl parsing checks to tools/xl

2020-09-09 10:57:25 +00:00

check-xl-vif-parse

tools/libxl: report trusted backend status to frontends

2022-07-05 14:16:26 +02:00

CODING_STYLE

xl: add CODING_STYLE

2017-03-02 13:41:03 +00:00

Makefile

Only compile the hypervisor with -Wdeclaration-after-statement

2023-12-06 19:12:40 +00:00

xl_block.c

libxl: Add support for Virtio disk configuration

2022-07-28 19:25:43 +01:00

xl_cdrom.c

xl: split out cdrom related code

2017-02-28 10:40:07 +00:00

xl_cmdtable.c

tools: Introduce the "xl dt-overlay attach" command

2024-05-24 16:26:22 -07:00

xl_console.c

xl: Add escape character argument to xl console

2023-07-31 15:03:14 +02:00

xl_cpupool.c

libxl: Make libxl_set_vcpuonline async

2019-09-20 10:41:01 +01:00

xl_flask.c

Various: Fix typo `occured'

2018-10-08 15:20:18 +01:00

xl_info.c

tools: Fix ifdef for aarch64 that should include also arm

2023-07-04 20:10:20 +01:00

xl_mem.c

xl: split out memory related code

2017-02-28 10:40:07 +00:00

xl_migrate.c

xl: optionally print timestamps when running xl commands

2021-02-09 17:10:23 +00:00

xl_misc.c

tools/libxl: use libxenhypfs for setting xen runtime parameters

2020-05-29 12:20:08 +02:00

xl_nic.c

libxl: change nic to use generec add function

2017-09-13 09:40:46 +01:00

xl_parse.c

tools/arm: Introduce the "nr_spis" xl config entry

2024-05-24 16:26:22 -07:00

xl_parse.h

tools/xl: make split_string_into_pair() more usable

2023-03-23 09:18:12 +01:00

xl_pci.c

xl: support naming of assignable devices

2021-01-21 15:20:40 +00:00

xl_psr.c

tools: implement new generic set value interface and MBA set value command

2018-01-18 11:32:51 +00:00

xl_saverestore.c

xl: allow domid to be preserved on save/restore or migrate

2020-02-24 17:17:35 +00:00

xl_sched.c

tools: libxl/xl: allow to get/set Credit1's vcpu_migration_delay

2018-03-21 16:24:58 +00:00

xl_sxp.c

Revert patches that break libxl API

2020-12-16 18:03:26 +00:00

xl_usb.c

xl: split out usb related code

2017-02-28 10:40:07 +00:00

xl_utils.c

tools/xl: Open xldevd.log with O_CLOEXEC

2024-06-24 16:22:59 +01:00

xl_utils.h

tools/xl: Use const whenever we point to literal strings

2021-05-05 18:43:06 +01:00

xl_vcpu.c

tools/xl: vcpu-pin: Skip global affinity when the hard affinity is not changed

2020-05-11 10:18:22 +01:00

xl_vdispl.c

libxl/xl: rename id to unique-id in vdispl xen store

2018-07-10 08:46:10 +01:00

xl_vkb.c

tools/xl: Fix exit code for xl vkbattach

2021-02-17 12:37:08 +00:00

xl_vmcontrol.c

tools: Introduce the "xl dt-overlay attach" command

2024-05-24 16:26:22 -07:00

xl_vsnd.c

xl/vsnd: initialise rc in dryrun path

2018-07-10 15:17:43 +01:00

xl_vtpm.c

libxl: change vtpm to use generec add function

2017-09-13 09:40:57 +01:00

xl.c

libxl: add support for running bootloader in restricted mode

2023-10-11 06:36:50 +01:00

xl.h

libxl: add support for running bootloader in restricted mode

2023-10-11 06:36:50 +01:00