From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:59841) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1etzW1-0007Q8-34 for qemu-devel@nongnu.org; Thu, 08 Mar 2018 12:39:42 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1etzVw-0008H9-5q for qemu-devel@nongnu.org; Thu, 08 Mar 2018 12:39:41 -0500 Received: from smtp.citrix.com ([66.165.176.89]:44779) by eggs.gnu.org with esmtps (TLS1.0:RSA_ARCFOUR_SHA1:16) (Exim 4.71) (envelope-from ) id 1etzVv-0008GN-VL for qemu-devel@nongnu.org; Thu, 08 Mar 2018 12:39:36 -0500 From: Ian Jackson Date: Thu, 8 Mar 2018 17:39:06 +0000 Message-ID: <1520530757-4477-1-git-send-email-ian.jackson@eu.citrix.com> MIME-Version: 1.0 Content-Type: text/plain Subject: [Qemu-devel] [PATCH v6 00/11] xen: xen-domid-restrict improvements List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: qemu-devel@nongnu.org Cc: xen-devel@lists.xenproject.org This series provides necessary support for running qemu as a Xen device model without power equivalent to root. In particular, it makes -xen-domid-restrict effective. I have taken into account all the comments from v5 (from October!) and there are also two new patches from Ross Lagerwall. m a [PATCH 01/11] xen: link against xentoolcore a [PATCH 02/11] xen: restrict: use xentoolcore_restrict_all r [PATCH 03/11] xen: defer call to xen_restrict until just before a [PATCH 04/11] xen: destroy_hvm_domain: Move reason into a variable ra [PATCH 05/11] xen: move xc_interface compatibility fallback further * r [PATCH 06/11] xen: destroy_hvm_domain: Try xendevicemodel_shutdown * r [PATCH 07/11] os-posix: Provide new -runas : facility m [PATCH 08/11] configure: do_compiler: Dump some extra info under bash + [PATCH 09/11] xen: Use newly added dmops for mapping VGA memory + [PATCH 10/11] xen: Expect xenstore write to fail when restricted + [PATCH 11/11] scripts/get_maintainer.pl: Print proper error message m = commit message (only) changed in v6 of the series * = patch changed in v6 of the series + = new patch r = reviewed (by someone other than me) a = acked Thanks for your attention. Regards, Ian.