From mboxrd@z Thu Jan 1 00:00:00 1970 From: George Dunlap Subject: Re: [PATCH v2 6/6] RFC: tools/dm_restrict: Enable QEMU sandboxing Date: Mon, 24 Sep 2018 14:43:23 +0100 Message-ID: References: <20180921170428.13771-1-george.dunlap@citrix.com> <20180921170428.13771-6-george.dunlap@citrix.com> <23464.49451.531992.450514@mariner.uk.xensource.com> <23464.57587.641742.948316@mariner.uk.xensource.com> Mime-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Return-path: Received: from us1-rack-dfw2.inumbo.com ([104.130.134.6]) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1g4R99-00045B-23 for xen-devel@lists.xenproject.org; Mon, 24 Sep 2018 13:43:31 +0000 In-Reply-To: <23464.57587.641742.948316@mariner.uk.xensource.com> Content-Language: en-US List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-devel-bounces@lists.xenproject.org Sender: "Xen-devel" To: Ian Jackson Cc: Anthony Perard , xen-devel@lists.xenproject.org, Stefano Stabellini , Wei Liu List-Id: xen-devel@lists.xenproject.org T24gMDkvMjQvMjAxOCAwMjowNCBQTSwgSWFuIEphY2tzb24gd3JvdGU6Cj4gR2VvcmdlIER1bmxh cCB3cml0ZXMgKCJSZTogW1BBVENIIHYyIDYvNl0gUkZDOiB0b29scy9kbV9yZXN0cmljdDogRW5h YmxlIFFFTVUgc2FuZGJveGluZyIpOgo+PiBGcm9tIHFlbXUtZGVwcml2Lm1kOgo+Pgo+PiBgZWxl dmF0ZXByaXZpbGVnZXNgIGlzIGN1cnJlbnRseSByZXF1aXJlZCB0byBhbGxvdyBgLXJ1bmFzYCB0 byB3b3JrLgo+PiBSZW1vdmluZyB0aGlzIHJlcXVpcmVtZW50IHdvdWxkIG1lYW4gbWFraW5nIHN1 cmUgdGhhdCB0aGUgdWlkIGNoYW5nZQo+PiBoYXBwZW5lZCBiZWZvcmUgdGhlIHNlY2NvbXAyIGNh bGwsIHBlcmhhcHMgYnkgY2hhbmdpbmcgdGhlIHVpZCBiZWZvcmUKPj4gZXhlY3V0aW5nIFFFTVUu ICAoQnV0IHRoaXMgd291bGQgdGhlbiByZXF1aXJlIG90aGVyIGNoYW5nZXMgdG8gY3JlYXRlCj4+ IHRoZSBRTVAgc29ja2V0LCBWTkMgc29ja2V0LCBhbmQgc28gb24pLgo+Pgo+PiBTaG91bGQgSSBD JlAgdGhpcyBpbnRvIGEgY29tbWVudCBoZXJlPwo+IAo+IFllcy4KPiAKPiBJIHRoaW5rIHRoZSBj b25jbHVzaW9uIEkgd291bGQgZHJhdyBmcm9tIHRoYXQgY29tbWVudCBpcyBub3QgdGhhdCB0aGUK PiB1aWQgY2hhbmdlIHNob3VsZCBoYXBwZW4gYmVmb3JlIGV4ZWMnaW5nIHFlbXUsIGJ1dCB0aGF0 IHRoZSBzZWNjb21wCj4gY2FsbCBpbiBxZW11IGlzIG1hZGUgdG9vIGVhcmx5LiAgQnV0IGZpbmUu CgpZZWFoLCBJIHdhcyB0aGlua2luZyB0aGF0IGp1c3QgYWZ0ZXIgSSBzZW50IHRoaXMgbWFpbCB0 b287IGl0IHdvdWxkIGJlCmdvb2QgdG8gc2VlIGlmIHRoZXJlIHdhcyBhIHJlYXNvbmluZyBiZWhp bmQgdGhhdC4KCj4+PiBJbiB0aGlzIHN5bnRheCwgd2hhdCBoYXBwZW5zIHdpdGggdW5tZW50aW9u ZWQgYWJpbGl0aWVzID8KPj4KPj4gR29vZCBxdWVzdGlvbiAtLSB0aGUgLWhlbHAgZG9lc24ndCBz ZWVtIHRvIHNheS4gIExvb2tpbmcgYXQgdGhlIGNvZGUKPj4gKHFlbXUtc2VjY29tcC5jOnBhcnNl X3NhbmRib3goKSkgZm9yIHRob3NlIHdobyB3YW50IHRvIGZvbGxvdyBhbG9uZyBhdAo+PiBob21l KSwgaXQgc2VlbXMgZGlmZmVyZW50IG9wdGlvbnMgaGF2ZSBkaWZmZXJlbnQgZGVmYXVsdCB2YWx1 ZXMgKHdoaWNoCj4+IGFyZSBub3QgbWVudGlvbmVkKSAtLSBvYnNvbGV0ZSBpcyBkZWZhdWx0IGRl bnksIGJ1dCBzcGF3biwKPj4gZWxldmF0ZXByaXZpbGVnZXMsIGFuZCByZXNvdXJjc2Vjb250cm9s IGFyZSBkZWZhdWx0IGFsbG93Lgo+IAo+IEVyay4gIEkgZ3Vlc3Mgd2UgY291bGQgcGFyc2UgLWhl bHAgb3V0cHV0IDotLy4KPiAKPiBXaGF0IGFib3V0IGNhcGFiaWxpdGllcyBub3Qga25vd24gdG8g dGhlIHFlbXUgc291cmNlIGNvZGUgPwoKSHJtIC0tIGl0IGxvb2tzIGxpa2UgdGhlIHNhbmRib3hp bmcgc3R1ZmYgaXMgYmFzZWQgb24gYSBibGFja2xpc3QsCnJhdGhlciB0aGFuIGEgd2hpdGVsaXN0 LiAgV2hpY2ggbWF5IGJlIGluZXZpdGFibGUsIGdpdmVuIHRoYXQgc2VjY29tcDIKb3BlcmF0ZXMg b24gc3lzdGVtIGNhbGxzIGJ1dCBxZW11IG1ha2VzIGxpYnJhcnkgY2FsbHMgKGFuZCB0aHVzIGRv ZXNuJ3QKYWN0dWFsbHkga25vdyB3aGljaCBzeXN0ZW0gY2FsbHMgYXJlIG5lZWQgYW5kIHdoaWNo IGFyZSBub3QgLS0gc2VlIFsxXSkuCiBCdXQgaXQgZG9lcyByYXRoZXIgdW5kZXJtaW5lIHRoZSB1 c2VmdWxuZXNzIG9mIHRoaXMgYXMgYSBzZWN1cml0eQpmZWF0dXJlIC0tIHRoZXJlIGFyZSBsaXRl cmFsbHkgaHVuZHJlZHMgb2Ygc3lzdGVtIGNhbGxzIGF2YWlsYWJsZSBvbgpMaW51eCwgb2Ygd2hp Y2ggb25seSA1MCBvciBzbyBhcmUgbGlzdGVkIGhlcmUuCgpMdWNraWx5IGAtc2FuZGJveGAgd2Fz IGp1c3Qgb25lIG9mIHRoZSAic3VyZSB3aHkgbm90IiBsYXllcnMgb2YgZXh0cmEKc2VjdXJpdHks IG5vdCBzb21ldGhpbmcgd2UgcmVseSBvbi4KCldlIGNvdWxkIGFkZCBhIHRlc3QgdG8gb3VyIHRl c3Rpbmcgc2NyaXB0IHRvIHBhcnNlIGAtaGVscGAgb3V0cHV0IGZvcgp1bmtub3duLXRvLWxpYnhs IG9wdGlvbnMgYW5kIHRocm93IGFuIGVycm9yLCBzbyB0aGF0IHRoZXkgZ2V0IGFkZGVkIGluLApp ZiB3ZSB3YW50LgoKIC1HZW9yZ2UKClsxXSBodHRwczovL2x3bi5uZXQvQXJ0aWNsZXMvNzM4Njk0 LwoKX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWRl dmVsIG1haWxpbmcgbGlzdApYZW4tZGV2ZWxAbGlzdHMueGVucHJvamVjdC5vcmcKaHR0cHM6Ly9s aXN0cy54ZW5wcm9qZWN0Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL3hlbi1kZXZlbA==