From: Ian Jackson <ian.jackson@eu.citrix.com>
To: xen-devel@lists.xensource.com
Cc: Ian Jackson <Ian.Jackson@eu.citrix.com>,
Wei Liu <wei.liu2@citrix.com>,
Ian Campbell <Ian.Campbell@citrix.com>,
Stefano Stabellini <stefano.stabellini@eu.citrix.com>
Subject: [PATCH 23/28] libxl: dm user: Move user choice earlier, and fill in config
Date: Tue, 22 Dec 2015 18:44:58 +0000 [thread overview]
Message-ID: <1450809903-3393-24-git-send-email-ian.jackson@eu.citrix.com> (raw)
In-Reply-To: <1450809903-3393-1-git-send-email-ian.jackson@eu.citrix.com>
Move the dm user defaulting from libxl__build_device_model_args_new
earlier in domain create. We now do it just after the dm support
check has finished.
Convey the result to the dm args constructor in the b_info, ie in the
supplied config. So, the application's supplied config is filled in
with the chosen user, as for other defaults.
Also:
- slightly improve one of the warning messages
- change the moved code to use `rc' (following CODING_STYLE)
rather than `ret'
- change the moved code to use `domid' rather than `guest_domid'
like most of the rest of domain create
- change the name of the (static) user selection function.
Signed-off-by: Ian Jackson <Ian.Jackson@eu.citrix.com>
CC: Stefano Stabellini <stefano.stabellini@eu.citrix.com>
---
v6: New patch
---
tools/libxl/libxl_create.c | 84 ++++++++++++++++++++++++++++++++++++++++++++
tools/libxl/libxl_dm.c | 62 ++------------------------------
2 files changed, 86 insertions(+), 60 deletions(-)
diff --git a/tools/libxl/libxl_create.c b/tools/libxl/libxl_create.c
index b41c6bd..be9bb7b 100644
--- a/tools/libxl/libxl_create.c
+++ b/tools/libxl/libxl_create.c
@@ -20,6 +20,8 @@
#include "libxl_internal.h"
#include "libxl_arch.h"
+#include <pwd.h>
+
#include <xc_dom.h>
#include <xenguest.h>
#include <xen/hvm/hvm_info_table.h>
@@ -388,6 +390,83 @@ int libxl__domain_build_info_setdefault(libxl__gc *gc,
return 0;
}
+/* return 1 if the user was found, 0 if it was not, -1 on error */
+static int dm_runas_helper(libxl__gc *gc, const char *username)
+{
+ struct passwd pwd, *user = NULL;
+ char *buf = NULL;
+ long buf_size;
+ int ret;
+
+ buf_size = sysconf(_SC_GETPW_R_SIZE_MAX);
+ if (buf_size < 0) {
+ LOGE(ERROR, "sysconf(_SC_GETPW_R_SIZE_MAX) returned error %ld",
+ buf_size);
+ return ERROR_FAIL;
+ }
+
+ while (1) {
+ buf = libxl__realloc(gc, buf, buf_size);
+ ret = getpwnam_r(username, &pwd, buf, buf_size, &user);
+ if (ret == ERANGE) {
+ buf_size += 128;
+ continue;
+ }
+ if (ret != 0)
+ return ERROR_FAIL;
+ if (user != NULL)
+ return 1;
+ return 0;
+ }
+}
+
+static int domcreate_setdefault_dm_user(libxl__gc *gc,
+ libxl__domain_create_state *dcs)
+{
+ /* convenience aliases */
+ libxl_domain_config *const d_config = dcs->guest_config;
+ libxl_domain_build_info *const b_info = &d_config->b_info;
+ const uint32_t domid = dcs->guest_domid;
+
+ int rc;
+ const char *user;
+
+ if (b_info->device_model_user)
+ /* already set, good-oh */
+ return 0;
+
+ if (!(b_info->type == LIBXL_DOMAIN_TYPE_HVM &&
+ !libxl_defbool_val(b_info->device_model_stubdomain)))
+ /* we're not going to run it anyway */
+ return 0;
+
+ user = GCSPRINTF("%s%d", LIBXL_QEMU_USER_BASE, domid);
+
+ rc = dm_runas_helper(gc, user);
+ if (rc < 0) goto error;
+ if (rc > 0) goto found;
+
+ user = LIBXL_QEMU_USER_SHARED;
+ rc = dm_runas_helper(gc, user);
+ if (rc < 0) goto error;
+ if (rc > 0) {
+ LOG(WARN, "Could not find user %s%d, falling back to %s",
+ LIBXL_QEMU_USER_BASE, domid, LIBXL_QEMU_USER_SHARED);
+ goto found;
+ }
+
+ LOG(WARN, "Could not find user %s%d or %s, starting QEMU as root",
+ LIBXL_QEMU_USER_BASE, domid, LIBXL_QEMU_USER_SHARED);
+ user = "root";
+
+ found:
+ b_info->device_model_user = libxl__strdup(NOGC, user);
+ return 0;
+
+ error:
+ return rc;
+}
+
static void init_console_info(libxl__gc *gc,
libxl__device_console *console,
int dev_num)
@@ -970,6 +1049,11 @@ static void domcreate_dm_support_checked(libxl__egc *egc,
if (rc) goto out;
+ /* config defaults which depend on dm support etc. */
+
+ rc = domcreate_setdefault_dm_user(gc, dcs);
+ if (rc) goto out;
+
dcs->bl.ao = ao;
libxl_device_disk *bootdisk =
d_config->num_disks > 0 ? &d_config->disks[0] : NULL;
diff --git a/tools/libxl/libxl_dm.c b/tools/libxl/libxl_dm.c
index 8232981..5e1a6cf 100644
--- a/tools/libxl/libxl_dm.c
+++ b/tools/libxl/libxl_dm.c
@@ -21,8 +21,6 @@
#include <xc_dom.h>
#include <xen/hvm/e820.h>
-#include <sys/types.h>
-#include <pwd.h>
static const char *libxl_tapif_script(libxl__gc *gc)
{
@@ -728,36 +726,6 @@ libxl__detect_gfx_passthru_kind(libxl__gc *gc,
return LIBXL_GFX_PASSTHRU_KIND_DEFAULT;
}
-/* return 1 if the user was found, 0 if it was not, -1 on error */
-static int libxl__dm_runas_helper(libxl__gc *gc, const char *username)
-{
- struct passwd pwd, *user = NULL;
- char *buf = NULL;
- long buf_size;
- int ret;
-
- buf_size = sysconf(_SC_GETPW_R_SIZE_MAX);
- if (buf_size < 0) {
- LOGE(ERROR, "sysconf(_SC_GETPW_R_SIZE_MAX) returned error %ld",
- buf_size);
- return ERROR_FAIL;
- }
-
- while (1) {
- buf = libxl__realloc(gc, buf, buf_size);
- ret = getpwnam_r(username, &pwd, buf, buf_size, &user);
- if (ret == ERANGE) {
- buf_size += 128;
- continue;
- }
- if (ret != 0)
- return ERROR_FAIL;
- if (user != NULL)
- return 1;
- return 0;
- }
-}
-
static int libxl__build_device_model_args_new(libxl__gc *gc,
const char *dm, int guest_domid,
int emuid,
@@ -777,10 +745,9 @@ static int libxl__build_device_model_args_new(libxl__gc *gc,
const char *keymap = dm_keymap(guest_config);
char *machinearg;
flexarray_t *dm_args, *dm_envs;
- int i, connection, devid, ret;
+ int i, connection, devid;
uint64_t ram_size;
const char *path, *chardev;
- char *user = NULL;
dm_args = flexarray_make(gc, 16, 1);
dm_envs = flexarray_make(gc, 16, 1);
@@ -1263,33 +1230,8 @@ static int libxl__build_device_model_args_new(libxl__gc *gc,
break;
}
- if (b_info->device_model_user) {
- user = b_info->device_model_user;
- goto end_search;
- }
-
- user = GCSPRINTF("%s%d", LIBXL_QEMU_USER_BASE, guest_domid);
- ret = libxl__dm_runas_helper(gc, user);
- if (ret < 0)
- return ret;
- if (ret > 0)
- goto end_search;
-
- user = LIBXL_QEMU_USER_SHARED;
- ret = libxl__dm_runas_helper(gc, user);
- if (ret < 0)
- return ret;
- if (ret > 0) {
- LOG(WARN, "Could not find user %s%d, falling back to %s",
- LIBXL_QEMU_USER_BASE, guest_domid, LIBXL_QEMU_USER_SHARED);
- goto end_search;
- }
-
- user = NULL;
- LOG(WARN, "Could not find user %s, starting QEMU as root",
- LIBXL_QEMU_USER_SHARED);
+ char *const user = b_info->device_model_user;
-end_search:
if (user != NULL && strcmp(user, "root")) {
flexarray_append(dm_args, "-runas");
flexarray_append(dm_args, user);
--
1.7.10.4
next prev parent reply other threads:[~2015-12-22 18:44 UTC|newest]
Thread overview: 61+ messages / expand[flat|nested] mbox.gz Atom feed top
2015-12-22 18:44 [RFC PATCH v6 00/28] libxl: Deprivilege qemu Ian Jackson
2015-12-22 18:44 ` [PATCH 01/28] libxl: Move FILLZERO up in libxl_internal.h Ian Jackson
2016-01-07 17:08 ` Ian Campbell
2015-12-22 18:44 ` [PATCH 02/28] libxl: libxl_types_internal.idl: Add Emacs mode comment Ian Jackson
2016-01-07 17:09 ` Ian Campbell
2015-12-22 18:44 ` [PATCH 03/28] libxl: Provide libxl__dm_support_* Ian Jackson
2016-01-07 17:13 ` Ian Campbell
2016-01-08 12:13 ` Ian Jackson
2016-01-11 17:00 ` Jim Fehlig
2016-01-14 10:14 ` Ian Campbell
2016-01-14 18:31 ` Jim Fehlig
2016-01-15 9:56 ` Ian Campbell
2016-01-15 14:54 ` Jim Fehlig
2015-12-22 18:44 ` [PATCH 04/28] libxl: Invoke libxl__dm_support_* Ian Jackson
2015-12-22 18:44 ` [PATCH 05/28] libxl: libxl__spawn_stub_dm: Introduce `dmpath' Ian Jackson
2015-12-22 18:44 ` [PATCH 06/28] libxl: qemu_pci_*: Introduce DMPATH local macro, twice Ian Jackson
2015-12-22 18:44 ` [PATCH 07/28] libxl: libxl__device_model_xs_path: Add emulator_id parameter Ian Jackson
2015-12-22 18:44 ` [PATCH 08/28] libxl: libxl__destroy_domid: Bring dm destruction together Ian Jackson
2015-12-22 18:44 ` [PATCH 09/28] libxl: Move some error handling and cleanup into libxl__destroy_device_model Ian Jackson
2015-12-22 18:44 ` [PATCH 10/28] libxl: kill_device_model: Silently tolerate ENOENT on pid xs path Ian Jackson
2015-12-22 18:44 ` [PATCH 11/28] libxl: emuids: Pass correct emuid to internal functions Ian Jackson
2015-12-22 18:44 ` [PATCH 12/28] libxl: Use libxl__device_model_xs_path in libxl__spawn_qdisk_backend Ian Jackson
2015-12-22 18:44 ` [PATCH 13/28] libxl: emuids: Record which emuids we have started to create Ian Jackson
2015-12-22 18:44 ` [PATCH 14/28] libxl: emuids: Pass emuid to dm destruction Ian Jackson
2015-12-22 18:44 ` [PATCH 15/28] libxl: emuids: Pass emuid to device model argument construction Ian Jackson
2015-12-22 18:44 ` [PATCH 16/28] libxl: emuids: Provide libxl__dm_xs_path_rel Ian Jackson
2015-12-22 18:44 ` [PATCH 17/28] libxl: emuids: Do not open-code device-model/%u in libxl__destroy_qdisk_backend Ian Jackson
2015-12-22 18:44 ` [PATCH 18/28] libxl: emuids: Change pid path in xenstore Ian Jackson
2015-12-22 18:44 ` [PATCH 19/28] libxl: Improve libxl__destroy_device_model Ian Jackson
2015-12-22 18:44 ` [PATCH 20/28] libxl: domcreate_dm_support_checked: Introduce `goto out' Ian Jackson
2015-12-22 18:44 ` [PATCH 21/28] libxl: dm user: Reject attempts to set user!=root with qemu trad Ian Jackson
2016-01-07 17:20 ` Ian Campbell
2016-01-08 12:16 ` Ian Jackson
2016-01-08 12:23 ` Ian Campbell
2015-12-22 18:44 ` [PATCH 22/28] libxl: dm user: Document the default Ian Jackson
2016-01-07 17:20 ` Ian Campbell
2015-12-22 18:44 ` Ian Jackson [this message]
2015-12-22 18:44 ` [PATCH 24/28] libxl: dm spawn records rc in state struct rather than passing as argument Ian Jackson
2015-12-22 18:45 ` [PATCH 25/28] libxl: emuids: Perhaps change dm xs control path Ian Jackson
2016-01-07 17:26 ` Ian Campbell
2016-01-08 14:12 ` Ian Jackson
2016-01-08 14:36 ` Ian Campbell
2016-01-08 14:45 ` Ian Jackson
2016-01-08 14:49 ` Ian Campbell
2015-12-22 18:45 ` [PATCH 26/28] libxl: spawns two QEMUs for HVM guests Ian Jackson
2016-01-07 17:28 ` Ian Campbell
2016-01-08 14:35 ` Ian Jackson
2016-01-08 14:52 ` Ian Campbell
2015-12-22 18:45 ` [PATCH 27/28] libxl: Limit qemu physmap entries Ian Jackson
2016-01-07 17:28 ` Ian Campbell
2015-12-22 18:45 ` [PATCH 28/28] libxl: xsrestrict QEMU Ian Jackson
2016-01-07 17:36 ` Ian Campbell
2016-01-08 14:38 ` Ian Jackson
2016-04-10 19:52 ` Stefano Stabellini
2016-01-07 16:19 ` [RFC PATCH v6 00/28] libxl: Deprivilege qemu Wei Liu
2016-01-07 16:23 ` Stefano Stabellini
2016-01-07 16:36 ` Ian Jackson
2016-04-10 19:36 ` Stefano Stabellini
2016-04-11 10:35 ` Wei Liu
2016-04-14 17:27 ` Ian Jackson
2016-04-28 14:32 ` Ian Jackson
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1450809903-3393-24-git-send-email-ian.jackson@eu.citrix.com \
--to=ian.jackson@eu.citrix.com \
--cc=Ian.Campbell@citrix.com \
--cc=stefano.stabellini@eu.citrix.com \
--cc=wei.liu2@citrix.com \
--cc=xen-devel@lists.xensource.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).