From mboxrd@z Thu Jan 1 00:00:00 1970 From: Ian Jackson Subject: [PATCH v2 00/24] Provide some actual restriction of qemu Date: Mon, 9 Oct 2017 16:57:02 +0100 Message-ID: <1507564648-7580-1-git-send-email-ian.jackson@eu.citrix.com> Mime-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Return-path: List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-devel-bounces@lists.xen.org Sender: "Xen-devel" To: xen-devel@lists.xensource.com Cc: Ross Lagerwall , Stefano Stabellini , Wei Liu List-Id: xen-devel@lists.xenproject.org V2l0aCB0aGlzIHNlcmllcywgaXQgaXMgcG9zc2libGUgdG8gcnVuIHFlbXUgaW4gYSB3YXkgdGhh dCBJIHRoaW5rCnJlYWxseSBkb2VzIG5vdCBoYXZlIGdsb2JhbCBwcml2aWxlZ2UgYW55IG1vcmUu CgpJIGhhdmUgdmVyaWZpZWQgdGhhdCBpdCBydW5zIGFzIGEgbm9uLXJvb3QgdXNlci4gIEkgaGF2 ZSBjaGVja2VkIGFsbApvZiBpdHMgZmRzIGFuZCB0aGV5IGFyZSBlaXRoZXIgcHJpdmNtZCAod2hp Y2ggSSBoYXZlIGFycmFuZ2VkIHRvCm5ldXRlciksIG9yIC9kZXYvbnVsbCwgb3IgaGFybWxlc3Mg c29ja2V0cyBhbmQgcGlwZXMsIG9yIGV2dGNobi4KClVuZm9ydHVuYXRlbHkgdGhpcyBuZWVkcyBh IG5ldyAieGVudG9vbGNvcmUiIGxpYnJhcnksIHdoaWNoIGFsbCB0aGUKZXhpc3RpbmcgbGlicmFy aWVzIHJlZ2lzdGVyIHdpdGggc28gdGhhdCB0aGUgcmVzdHJpY3QgY2FsbCBpcwplZmZlY3RpdmUu CgpBbHNvIHRoZXJlIGFyZSBhIG51bWJlciBvZiBsYWN1bmFlLiAgU2VlIHRoZSBkb2N1bWVudGF0 aW9uIHBhdGNoZXMuCgpUaGUgc2VyaWVzIGRlcGVuZHMgZm9yIGl0cyBmdW5jdGlvbmFsaXR5IG9u IHRoZSBjb3JyZXNwb25kaW5nIHFlbXUKc2VyaWVzLgoKIGEgIDAxLzI2XSB4ZW46IFByb3ZpZGUg WEVOX0RNT1BfcmVtb3RlX3NodXRkb3duCiBhICAwMi8yNl0geGVuOiB4ODYgZG1fb3A6IGFkZCBt aXNzaW5nIG5ld2xpbmUgYmVmb3JlCiBhICAwMy8yNl0gdG9vbHM6IGxpYnhlbmRldmljZW1vZGVs OiBQcm92aWRlCiBhKiAwNC8yNl0geGVudG9vbGNvcmUsIF9yZXN0cmljdF9hbGw6IEludHJvZHVj ZSBuZXcgbGlicmFyeSBhbmQKIGEgIDA1LzI2XSB4ZW50b29sY29yZTogTGluayBpbnRvIHN0dWJk b21zCiAgKyAwNi8yNl0geGVudG9vbGNvcmU6IExpbmsgaW50byBtaW5pb3MgKHVwZGF0ZQogYSAg MDcvMjZdIHRvb2xzOiBxZW11LXhlbiBidWlsZDogcHJlcGFyZSB0byBsaW5rIGFnYWluc3QKIGEg IDA4LzI2XSBsaWJ4bDogI2luY2x1ZGUgInhlbnRvb2xjb3JlX2ludGVybmFsLmgiCiBhICAwOS8y Nl0gdG9vbHM6IG1vdmUgQ09OVEFJTkVSX09GIHRvIHhlbnRvb2xjb3JlX2ludGVybmFsLmgKIGEg IDEwLzI2XSB4ZW50b29sY29yZV9yZXN0cmljdF9hbGw6IEltcGxlbWVudCBmb3IKIGEgIDExLzI2 XSB4ZW50b29sY29yZV9yZXN0cmljdF9hbGw6ICJJbXBsZW1lbnQiIGZvciBsaWJ4ZW5jYWxsCiBh ICAxMi8yNl0geGVudG9vbGNvcmVfcmVzdHJpY3Q6IEJyZWFrIG91dAogYSAgMTMvMjZdIHhlbnRv b2xjb3JlX3Jlc3RyaWN0X2FsbDogSW1wbGVtZW50IGZvcgogYSAgMTQvMjZdIHhlbnRvb2xjb3Jl X3Jlc3RyaWN0X2FsbDogRGVjbGFyZSBwcm9ibGVtcyBkdWUgdG8gbm8KIGEgIDE1LzI2XSB4ZW50 b29sY29yZV9yZXN0cmljdF9hbGw6ICJJbXBsZW1lbnQiIGZvciB4ZW5nbnR0YWIKIGEgIDE2LzI2 XSB0b29scy94ZW5zdG9yZTogZ2V0X2hhbmRsZTogdXNlICJnb3RvIGVyciIgZXJyb3IKIGEgIDE3 LzI2XSB0b29scy94ZW5zdG9yZTogZ2V0X2hhbmRsZTogQWxsb2NhdGUgc3RydWN0IGJlZm9yZQog YSAgMTgvMjZdIHhlbnRvb2xjb3JlX3Jlc3RyaWN0X2FsbDogIkltcGxlbWVudCIgZm9yIHhlbnN0 b3JlCiBhICAxOS8yNl0geGVudG9vbGNvcmUsIF9yZXN0cmljdF9hbGw6IERvY3VtZW50IGltcGxl bWVudGF0aW9uCiBhICAyMC8yNl0geGwsIGxpYnhsOiBQcm92aWRlIGRtX3Jlc3RyaWN0CiBhICAy MS8yNl0gbGlieGw6IFJhdGlvbmFsaXNlIGNhbGN1bGF0aW9uIG9mIHVzZXIgdG8gcnVuIHFlbXUg YXMKIGEgIDIyLzI2XSBsaWJ4bDogbGlieGxfX2RtX3J1bmFzX2hlbHBlcjogcmV0dXJuIHB3ZAog YSAgMjMvMjZdIGxpYnhsOiB1c2VybG9va3VwX2hlbHBlcl9nZXRwd25hbSByZW5hbWUgYW5kIHR1 cm4gaW50bwogYSogMjQvMjZdIGxpYnhsOiBkbV9yZXN0cmljdDogU3VwcG9ydCB1aWQgcmFuZ2Ug dXNlcgogYSAgMjUvMjZdIHRvb2xzOiB4ZW50b29sY29yZV9yZXN0cmljdF9hbGw6IHVzZSBkb21p ZF90CiAgKyAyNi8yNl0geGw6IERvY3VtZW50IFZHQSBwcm9ibGVtcyBhcmlzaW5nIGZyb20gbGFj ayBvZiBwaHlzbWFwCgogYSA9IGFja2VkIChvciwgcmV2aWV3ZWQsIGZvciBoeXBlcnZpc29yIHBh dGNoZXMpCiAqID0gbW9kaWZpZWQgKGFja3MgcmV0YWluZWQgc2luY2UgbWlub3IgY2hhbmdlcyBv bmx5KQogKyA9IG5ldyBpbiB2NCBvZiB0aGUgc2VyaWVzIChzaW5jZSB0aGUgb3JpZ2luYWwgdjMg cG9zdCkKClRoYW5rcywKSWFuLgoKX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX18KWGVuLWRldmVsIG1haWxpbmcgbGlzdApYZW4tZGV2ZWxAbGlzdHMueGVuLm9y ZwpodHRwczovL2xpc3RzLnhlbi5vcmcveGVuLWRldmVsCg==