From mboxrd@z Thu Jan 1 00:00:00 1970 From: George Dunlap Subject: [PATCH 2/5] tools/dm_restrict: Ask QEMU to chroot Date: Fri, 5 Oct 2018 17:56:58 +0100 Message-ID: <20181005165701.28030-2-george.dunlap@citrix.com> References: <20181005165701.28030-1-george.dunlap@citrix.com> Mime-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Return-path: Received: from us1-rack-dfw2.inumbo.com ([104.130.134.6]) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1g8TPX-0001K9-Bv for xen-devel@lists.xenproject.org; Fri, 05 Oct 2018 16:57:07 +0000 In-Reply-To: <20181005165701.28030-1-george.dunlap@citrix.com> List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-devel-bounces@lists.xenproject.org Sender: "Xen-devel" To: xen-devel@lists.xenproject.org Cc: Anthony Perard , Ian Jackson , Wei Liu , George Dunlap List-Id: xen-devel@lists.xenproject.org V2hlbiBkbV9yZXN0cmljdCBpcyBlbmFibGVkLCBhc2sgUUVNVSB0byBjaHJvb3QgaW50byBhbiBl bXB0eSBkaXJlY3RvcnkuCgoqIENyZWF0ZSAvdmFyL3J1bi9xZW11L3Jvb3QtZG9taWQgKGRlbGV0 aW5nIHRoZSBvbGQgb25lIGlmIGl0J3MgdGhlcmUpCiogUGFzcyB0aGUgLWNocm9vdCBvcHRpb24g dG8gUUVNVQoKUmF0aGVyIHRoYW4gcnVubmluZyBgcm0gLXJmYCBvbiB0aGUgZGlyZWN0b3J5IGJl Zm9yZSBjcmVhdGluZyBpdAooc2luY2UgdGhlcmUgaXMgbm8gbGlicmFyeSBmdW5jdGlvbiB0byBk byB0aGlzKSwgc2ltcGx5IHJtZGlyIHRoZQpkaXJlY3RvcnksIHJlbHlpbmcgb24gdGhlIGZhY3Qg dGhhdCB0aGUgcHJldmlvdXMgUUVNVSBpbnN0YW5jZSwgaWYKcHJvcGVybHkgcmVzdHJpY3RlZCwg c2hvdWxkbid0IGhhdmUgYmVlbiBhYmxlIHRvIHdyaXRlIGFueXRoaW5nCmFueXdheS4KClN1Z2dl c3RlZC1ieTogUm9zcyBMYWdlcndhbGwgPHJvc3MubGFnZXJ3YWxsQGNpdHJpeC5jb20+ClNpZ25l ZC1vZmYtYnk6IEdlb3JnZSBEdW5sYXAgPGdlb3JnZS5kdW5sYXBAY2l0cml4LmNvbT4KLS0tCkNo YW5nZXMgc2luY2UgdjI6Ci0gU3R5bGUgZml4ZXMKLSBUZXN0aW5nIG1vdmVkIHRvIGEgZGlmZmVy ZW50IHBhdGNoCgpDQzogSWFuIEphY2tzb24gPGlhbi5qYWNrc29uQGNpdHJpeC5jb20+CkNDOiBX ZWkgTGl1IDx3ZWkubGl1MkBjaXRyaXguY29tPgpDQzogQW50aG9ueSBQZXJhcmQgPGFudGhvbnku cGVyYXJkQGNpdHJpeC5jb20+Ci0tLQogZG9jcy9kZXNpZ25zL3FlbXUtZGVwcml2aWxlZ2UubWQg fCAxMiArKysrKy0tLS0tCiB0b29scy9saWJ4bC9saWJ4bF9kbS5jICAgICAgICAgICB8IDQxICsr KysrKysrKysrKysrKysrKysrKysrKysrKysrKystCiAyIGZpbGVzIGNoYW5nZWQsIDQ2IGluc2Vy dGlvbnMoKyksIDcgZGVsZXRpb25zKC0pCgpkaWZmIC0tZ2l0IGEvZG9jcy9kZXNpZ25zL3FlbXUt ZGVwcml2aWxlZ2UubWQgYi9kb2NzL2Rlc2lnbnMvcWVtdS1kZXByaXZpbGVnZS5tZAppbmRleCBk M2M2NDk1MDMwLi42ZGMzYzZkMTQ5IDEwMDY0NAotLS0gYS9kb2NzL2Rlc2lnbnMvcWVtdS1kZXBy aXZpbGVnZS5tZAorKysgYi9kb2NzL2Rlc2lnbnMvcWVtdS1kZXByaXZpbGVnZS5tZApAQCAtNjEs MTIgKzYxLDYgQEAgc291cmNlIHRyZWUuKQogCiAnJydUZXN0aW5nIHN0YXR1cycnJzogVGVzdGVk CiAKLSMgUmVzdHJpY3Rpb25zIC8gaW1wcm92ZW1lbnRzIHN0aWxsIHRvIGRvCi0KLVRoaXMgbGlz dHMgcG90ZW50aWFsIHJlc3RyaWN0aW9ucyBzdGlsbCB0byBkby4gIEl0IGlzIG1lYW50IHRvIGJl Ci1saXN0ZWQgaW4gb3JkZXIgb2YgZWFzZSBvZiBpbXBsZW1lbnRhdGlvbiwgd2l0aCBsb3ctaGFu Z2luZyBmcnVpdAotZmlyc3QuCi0KICMjIENocm9vdAogCiAnJydEZXNjcmlwdGlvbicnJzogUWVt dSBydW5zIGluIGl0cyBvd24gY2hyb290LCBzdWNoIHRoYXQgZXZlbiBpZiBpdApAQCAtODQsNiAr NzgsMTIgQEAgVGhlbiBhZGRzIHRoZSBmb2xsb3dpbmcgdG8gdGhlIHFlbXUgY29tbWFuZC1saW5l OgogCQogJycnVGVzdGVkJycnOiBOb3QgdGVzdGVkCiAKKyMjIFJlc3RyaWN0aW9ucyAvIGltcHJv dmVtZW50cyBzdGlsbCB0byBkbworCitUaGlzIGxpc3RzIHBvdGVudGlhbCByZXN0cmljdGlvbnMg c3RpbGwgdG8gZG8uICBJdCBpcyBtZWFudCB0byBiZQorbGlzdGVkIGluIG9yZGVyIG9mIGVhc2Ug b2YgaW1wbGVtZW50YXRpb24sIHdpdGggbG93LWhhbmdpbmcgZnJ1aXQKK2ZpcnN0LgorCiAjIyBO YW1lc3BhY2VzIGZvciB1bnVzZWQgZnVuY3Rpb25hbGl0eSAoTGludXggb25seSkKIAogJycnRGVz Y3JpcHRpb24nJyc6IFFFTVUgZG9lc24ndCB1c2UgdGhlIGZ1bmN0aW9uYWxpdHkgYXNzb2NpYXRl ZCB3aXRoCmRpZmYgLS1naXQgYS90b29scy9saWJ4bC9saWJ4bF9kbS5jIGIvdG9vbHMvbGlieGwv bGlieGxfZG0uYwppbmRleCBhYmQzMWVlNmYyLi4zODU2NDNiNTJjIDEwMDY0NAotLS0gYS90b29s cy9saWJ4bC9saWJ4bF9kbS5jCisrKyBiL3Rvb2xzL2xpYnhsL2xpYnhsX2RtLmMKQEAgLTE0MTAs OSArMTQxMCw0OCBAQCBzdGF0aWMgaW50IGxpYnhsX19idWlsZF9kZXZpY2VfbW9kZWxfYXJnc19u ZXcobGlieGxfX2djICpnYywKICAgICAgICAgfQogICAgIH0KIAotICAgIGlmIChsaWJ4bF9kZWZi b29sX3ZhbChiX2luZm8tPmRtX3Jlc3RyaWN0KSkKKyAgICBpZiAobGlieGxfZGVmYm9vbF92YWwo Yl9pbmZvLT5kbV9yZXN0cmljdCkpIHsKKyAgICAgICAgY2hhciAqY2hyb290X2RpciA9IEdDU1BS SU5URigiJXMvcWVtdS1yb290LSVkIiwKKyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgbGlieGxfX3J1bl9kaXJfcGF0aCgpLCBndWVzdF9kb21pZCk7CisgICAgICAgIGludCBy OworICAgICAgICAKICAgICAgICAgZmxleGFycmF5X2FwcGVuZChkbV9hcmdzLCAiLXhlbi1kb21p ZC1yZXN0cmljdCIpOwogCisgICAgICAgIC8qIAorICAgICAgICAgKiBSdW4gUUVNVSBpbiBhIGNo cm9vdCBhdCBYRU5fUlVOX0RJUi9xZW11LXJvb3QtJWQKKyAgICAgICAgICoKKyAgICAgICAgICog VGhlcmUgaXMgbm8gbGlicmFyeSBmdW5jdGlvbiB0byBkbyB0aGUgZXF1aXZhbGVudCBvZiBgcm0K KyAgICAgICAgICogLXJmYC4gIEhvd2V2ZXIgZGVwcml2aWxlZ2VkIFFFTVUgaW4gdGhlb3J5IHNo b3VsZG4ndCBiZQorICAgICAgICAgKiBhYmxlIHRvIHdyaXRlIGFueSBmaWxlcywgYXMgdGhlIGNo cm9vdCB3b3VsZCBiZSBvd25lZCBieQorICAgICAgICAgKiByb290LCBidXQgaXQgd291bGQgYmUg cnVubmluZyBhcyBhbiB1bnByaXZpbGVnZWQgcHJvY2Vzcy4KKyAgICAgICAgICogU28gaW4gdGhl b3J5LCBvbGQgY2hyb290cyBzaG91bGQgYWx3YXlzIGJlIGVtcHR5LgorICAgICAgICAgKiAKKyAg ICAgICAgICogcm1kaXIgdGhlIGRpcmVjdG9yeSBiZWZvcmUgYXR0ZW1wdGluZyB0byBjcmVhdGUK KyAgICAgICAgICogaXQ7IGlmIGl0IHJldHVybnMgYW55dGhpbmcgb3RoZXIgdGhhbiBFTk9FTlQs IGZhaWwgZG9tYWluCisgICAgICAgICAqIGNyZWF0aW9uLgorICAgICAgICAgKi8KKyAgICAgICAg ciA9IHJtZGlyKGNocm9vdF9kaXIpOworICAgICAgICBpZiAociAhPSAwICYmIGVycm5vICE9IEVO T0VOVCkgeworICAgICAgICAgICAgTE9HRUQoRVJST1IsIGd1ZXN0X2RvbWlkLAorICAgICAgICAg ICAgICAgICAgImZhaWxlZCB0byByZW1vdmUgZXhpc3RpbmcgY2hyb290IGRpciAlcyIsIGNocm9v dF9kaXIpOworICAgICAgICAgICAgcmV0dXJuIEVSUk9SX0ZBSUw7CisgICAgICAgIH0KKyAgICAg ICAgCisgICAgICAgIGZvciAoOzspIHsKKyAgICAgICAgICAgIHIgPSBta2RpcihjaHJvb3RfZGly LCAwMDAwKTsKKyAgICAgICAgICAgIGlmICghcikKKyAgICAgICAgICAgICAgICBicmVhazsKKyAg ICAgICAgICAgIGlmIChlcnJubyA9PSBFSU5UUikgY29udGludWU7CisgICAgICAgICAgICBMT0dF RChFUlJPUiwgZ3Vlc3RfZG9taWQsCisgICAgICAgICAgICAgICAgICAiZmFpbGVkIHRvIGNyZWF0 ZSBjaHJvb3QgZGlyICVzIiwgY2hyb290X2Rpcik7CisgICAgICAgICAgICByZXR1cm4gRVJST1Jf RkFJTDsKKyAgICAgICAgfQorCisgICAgICAgIC8qIEFkZCAiLWNocm9vdCBbZGlyXSIgdG8gY29t bWFuZC1saW5lICovCisgICAgICAgIGZsZXhhcnJheV9hcHBlbmQoZG1fYXJncywgIi1jaHJvb3Qi KTsKKyAgICAgICAgZmxleGFycmF5X2FwcGVuZChkbV9hcmdzLCBjaHJvb3RfZGlyKTsKKyAgICB9 CisKICAgICBpZiAoc3RhdGUtPnNhdmVkX3N0YXRlKSB7CiAgICAgICAgIC8qIFRoaXMgZmlsZSBk ZXNjcmlwdG9yIGlzIG1lYW50IHRvIGJlIHVzZWQgYnkgUUVNVSAqLwogICAgICAgICAqZG1fc3Rh dGVfZmQgPSBvcGVuKHN0YXRlLT5zYXZlZF9zdGF0ZSwgT19SRE9OTFkpOwotLSAKMi4xOS4wCgoK X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWRldmVs IG1haWxpbmcgbGlzdApYZW4tZGV2ZWxAbGlzdHMueGVucHJvamVjdC5vcmcKaHR0cHM6Ly9saXN0 cy54ZW5wcm9qZWN0Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL3hlbi1kZXZlbA==