Roger Pau Monne c84412457d libxl: limit bootloader execution in restricted mode ...

Introduce a timeout for bootloader execution when running in restricted mode.

Allow overwriting the default time out with an environment provided value.

This is part of XSA-443 / CVE-2023-34325

Signed-off-by: Roger Pau Monné <roger.pau@citrix.com>
Reviewed-by: Anthony PERARD <anthony.perard@citrix.com>
(cherry picked from commit 9c114178ff)

2023-09-29 15:57:07 +02:00

..

console

tools: drop all deprecated usages of xs_*_open() and friends in tools

2020-10-08 12:47:59 +00:00

debugger

tools/gdbsx: Use right path for privcmd on NetBSD

2021-01-18 19:07:37 +00:00

examples

examples: Add PVH example to config example list

2020-12-15 15:51:58 +00:00

firmware

tools/firmware: do not add a .note.gnu.property section

2022-04-06 10:24:10 +02:00

flask

build: add --full to version.sh to guess $(XEN_FULLVERSION)

2023-04-12 09:00:28 +01:00

fuzz

libx86: Update library API for cpu_policy

2023-08-03 19:13:40 +01:00

golang

tools/[lib]xl: Add vmtrace_buf_size parameter

2021-02-05 17:37:27 +00:00

helpers

tools/xenstore: make the internal memory data base the default

2022-11-01 15:03:25 +00:00

hotplug

tools/hotplug: Add a qemu-ifup script on NetBSD

2021-02-04 21:26:41 +00:00

include

libxl: change the type of libxl_cpuid_policy_list

2023-08-03 19:13:40 +01:00

libacpi

tools/libacpi: Use 64-byte alignment for FACS

2021-10-15 11:02:27 +02:00

libfsimage

tools/libfsimage: Export a new function to preload all plugins

2023-09-27 16:30:18 +01:00

libs

libxl: limit bootloader execution in restricted mode

2023-09-29 15:57:07 +02:00

misc

x86/spec-ctrl: Enumerations for Gather Data Sampling

2023-08-03 19:13:40 +01:00

ocaml

x86/sysctl: Retrofit XEN_SYSCTL_cpu_featureset_{pv,hvm}_max

2023-08-03 19:13:39 +01:00

pygrub

tools/pygrub: Deprivilege pygrub

2023-09-27 16:30:18 +01:00

python

tools/python: fix Python3.4 TypeError in format string

2021-07-15 11:55:50 +01:00

tests

x86/cpu-policy: Infrastructure for MSR_ARCH_CAPS

2023-08-03 19:13:40 +01:00

vchan

tools: split libxenvchan into new tools/libs/vchan directory

2020-09-09 10:57:25 +00:00

xcutils

tools/xcutils: use official headers in readnotes

2020-09-09 10:57:25 +00:00

xenmon

tools: Use INSTALL_PYTHON_PROG

2020-05-19 11:40:53 +01:00

xenpaging

tools/xenpaging: include errno.h

2021-01-18 18:58:20 +00:00

xenpmd

xenpmd.c: Remove hard tab

2021-02-01 15:18:36 +00:00

xenstore

tools/xenstored: domain_entry_fix(): Handle conflicting transaction

2023-09-27 16:30:18 +01:00

xentop

tools: split libxenstat into new tools/libs/stat directory

2020-09-09 10:57:25 +00:00

xentrace

Fix error: array subscript has type 'char'

2021-01-28 16:36:48 +00:00

xl

libxl: use the cpuid feature names from cpufeatureset.h

2023-08-03 19:13:40 +01:00

config.h.in

tools: rerun autoconf again

2021-02-10 15:30:59 +00:00

configure

tools: Drop gettext as a build dependency

2023-04-12 09:00:28 +01:00

configure.ac

tools: Drop gettext as a build dependency

2023-04-12 09:00:28 +01:00

cross-install

cross-install: Only apply in tools directory, and automatically wrap $INSTALL.

2008-08-30 08:36:02 +01:00

Makefile

tools/xenbackendd: Remove xenbackendd

2021-01-18 18:58:20 +00:00

Rules.mk

build: add --full to version.sh to guess $(XEN_FULLVERSION)

2023-04-12 09:00:28 +01:00