From mboxrd@z Thu Jan 1 00:00:00 1970 From: Paul Durrant Subject: Re: [PATCH v4 3/6] tools/dm_restrict: Ask QEMU to chroot Date: Tue, 6 Nov 2018 09:14:26 +0000 Message-ID: <47ff2f996ada4b23b58265aea74e62af@AMSPEX02CL03.citrite.net> References: <20181105180711.20322-1-george.dunlap@citrix.com> <20181105180711.20322-3-george.dunlap@citrix.com> Mime-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Return-path: Received: from us1-rack-dfw2.inumbo.com ([104.130.134.6]) by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from ) id 1gJxRO-0005aI-0X for xen-devel@lists.xenproject.org; Tue, 06 Nov 2018 09:14:30 +0000 In-Reply-To: <20181105180711.20322-3-george.dunlap@citrix.com> Content-Language: en-US List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-devel-bounces@lists.xenproject.org Sender: "Xen-devel" To: "xen-devel@lists.xenproject.org" Cc: Anthony Perard , Ian Jackson , Wei Liu , George Dunlap List-Id: xen-devel@lists.xenproject.org PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBYZW4tZGV2ZWwgW21haWx0bzp4 ZW4tZGV2ZWwtYm91bmNlc0BsaXN0cy54ZW5wcm9qZWN0Lm9yZ10gT24gQmVoYWxmDQo+IE9mIEdl b3JnZSBEdW5sYXANCj4gU2VudDogMDUgTm92ZW1iZXIgMjAxOCAxODowNw0KPiBUbzogeGVuLWRl dmVsQGxpc3RzLnhlbnByb2plY3Qub3JnDQo+IENjOiBBbnRob255IFBlcmFyZCA8YW50aG9ueS5w ZXJhcmRAY2l0cml4LmNvbT47IElhbiBKYWNrc29uDQo+IDxJYW4uSmFja3NvbkBjaXRyaXguY29t PjsgV2VpIExpdSA8d2VpLmxpdTJAY2l0cml4LmNvbT47IEdlb3JnZSBEdW5sYXANCj4gPEdlb3Jn ZS5EdW5sYXBAY2l0cml4LmNvbT4NCj4gU3ViamVjdDogW1hlbi1kZXZlbF0gW1BBVENIIHY0IDMv Nl0gdG9vbHMvZG1fcmVzdHJpY3Q6IEFzayBRRU1VIHRvIGNocm9vdA0KPiANCj4gV2hlbiBkbV9y ZXN0cmljdCBpcyBlbmFibGVkLCBhc2sgUUVNVSB0byBjaHJvb3QgaW50byBhbiBlbXB0eSBkaXJl Y3RvcnkuDQo+IA0KPiAqIENyZWF0ZSAvdmFyL3J1bi9xZW11L3Jvb3QtZG9taWQgKGRlbGV0aW5n IHRoZSBvbGQgb25lIGlmIGl0J3MgdGhlcmUpDQoNClRoaXMgZG9lcyBub3QgYXBwZWFyIHRvIG1h dGNoIHRoZSBjb2RlOiB0aGUgcGF0aCBzaG91bGQgYmUgL3Zhci9ydW4vcWVtdS1yb290LTxkb21p ZD4gQUZBSUNUDQoNCj4gKiBQYXNzIHRoZSAtY2hyb290IG9wdGlvbiB0byBRRU1VDQo+IA0KPiBS YXRoZXIgdGhhbiBydW5uaW5nIGBybSAtcmZgIG9uIHRoZSBkaXJlY3RvcnkgYmVmb3JlIGNyZWF0 aW5nIGl0DQo+IChzaW5jZSB0aGVyZSBpcyBubyBsaWJyYXJ5IGZ1bmN0aW9uIHRvIGRvIHRoaXMp LCBzaW1wbHkgcm1kaXIgdGhlDQo+IGRpcmVjdG9yeSwgcmVseWluZyBvbiB0aGUgZmFjdCB0aGF0 IHRoZSBwcmV2aW91cyBRRU1VIGluc3RhbmNlLCBpZg0KPiBwcm9wZXJseSByZXN0cmljdGVkLCBz aG91bGRuJ3QgaGF2ZSBiZWVuIGFibGUgdG8gd3JpdGUgYW55dGhpbmcNCj4gYW55d2F5Lg0KPiAN Cj4gU3VnZ2VzdGVkLWJ5OiBSb3NzIExhZ2Vyd2FsbCA8cm9zcy5sYWdlcndhbGxAY2l0cml4LmNv bT4NCj4gU2lnbmVkLW9mZi1ieTogR2VvcmdlIER1bmxhcCA8Z2VvcmdlLmR1bmxhcEBjaXRyaXgu Y29tPg0KPiBBY2tlZC1ieTogSWFuIEphY2tzb24gPGlhbi5qYWNrc29uQGV1LmNpdHJpeC5jb20+ DQo+IC0tLQ0KPiBDaGFuZ2VzIHNpbmNlIHYyOg0KPiAtIFN0eWxlIGZpeGVzDQo+IC0gVGVzdGlu ZyBtb3ZlZCB0byBhIGRpZmZlcmVudCBwYXRjaA0KPiANCj4gQ0M6IElhbiBKYWNrc29uIDxpYW4u amFja3NvbkBjaXRyaXguY29tPg0KPiBDQzogV2VpIExpdSA8d2VpLmxpdTJAY2l0cml4LmNvbT4N Cj4gQ0M6IEFudGhvbnkgUGVyYXJkIDxhbnRob255LnBlcmFyZEBjaXRyaXguY29tPg0KPiAtLS0N Cj4gIGRvY3MvZGVzaWducy9xZW11LWRlcHJpdmlsZWdlLm1kIHwgMTIgKysrKystLS0tLQ0KPiAg dG9vbHMvbGlieGwvbGlieGxfZG0uYyAgICAgICAgICAgfCA0MSArKysrKysrKysrKysrKysrKysr KysrKysrKysrKysrLQ0KPiAgMiBmaWxlcyBjaGFuZ2VkLCA0NiBpbnNlcnRpb25zKCspLCA3IGRl bGV0aW9ucygtKQ0KPiANCj4gZGlmZiAtLWdpdCBhL2RvY3MvZGVzaWducy9xZW11LWRlcHJpdmls ZWdlLm1kIGIvZG9jcy9kZXNpZ25zL3FlbXUtDQo+IGRlcHJpdmlsZWdlLm1kDQo+IGluZGV4IDc4 N2FlMWFjN2MuLjAzOTViYmJiNDAgMTAwNjQ0DQo+IC0tLSBhL2RvY3MvZGVzaWducy9xZW11LWRl cHJpdmlsZWdlLm1kDQo+ICsrKyBiL2RvY3MvZGVzaWducy9xZW11LWRlcHJpdmlsZWdlLm1kDQo+ IEBAIC02MSwxMiArNjEsNiBAQCBzb3VyY2UgdHJlZS4pDQo+IA0KPiAgJycnVGVzdGluZyBzdGF0 dXMnJyc6IFRlc3RlZA0KPiANCj4gLSMgUmVzdHJpY3Rpb25zIC8gaW1wcm92ZW1lbnRzIHN0aWxs IHRvIGRvDQo+IC0NCj4gLVRoaXMgbGlzdHMgcG90ZW50aWFsIHJlc3RyaWN0aW9ucyBzdGlsbCB0 byBkby4gIEl0IGlzIG1lYW50IHRvIGJlDQo+IC1saXN0ZWQgaW4gb3JkZXIgb2YgZWFzZSBvZiBp bXBsZW1lbnRhdGlvbiwgd2l0aCBsb3ctaGFuZ2luZyBmcnVpdA0KPiAtZmlyc3QuDQo+IC0NCj4g ICMjIENocm9vdA0KPiANCj4gICcnJ0Rlc2NyaXB0aW9uJycnOiBRZW11IHJ1bnMgaW4gaXRzIG93 biBjaHJvb3QsIHN1Y2ggdGhhdCBldmVuIGlmIGl0DQo+IEBAIC04NCw2ICs3OCwxMiBAQCBUaGVu IGFkZHMgdGhlIGZvbGxvd2luZyB0byB0aGUgcWVtdSBjb21tYW5kLWxpbmU6DQo+IA0KPiAgJycn VGVzdGVkJycnOiBOb3QgdGVzdGVkDQo+IA0KPiArIyMgUmVzdHJpY3Rpb25zIC8gaW1wcm92ZW1l bnRzIHN0aWxsIHRvIGRvDQo+ICsNCj4gK1RoaXMgbGlzdHMgcG90ZW50aWFsIHJlc3RyaWN0aW9u cyBzdGlsbCB0byBkby4gIEl0IGlzIG1lYW50IHRvIGJlDQo+ICtsaXN0ZWQgaW4gb3JkZXIgb2Yg ZWFzZSBvZiBpbXBsZW1lbnRhdGlvbiwgd2l0aCBsb3ctaGFuZ2luZyBmcnVpdA0KPiArZmlyc3Qu DQo+ICsNCj4gICMjIE5hbWVzcGFjZXMgZm9yIHVudXNlZCBmdW5jdGlvbmFsaXR5IChMaW51eCBv bmx5KQ0KPiANCj4gICcnJ0Rlc2NyaXB0aW9uJycnOiBRRU1VIGRvZXNuJ3QgdXNlIHRoZSBmdW5j dGlvbmFsaXR5IGFzc29jaWF0ZWQgd2l0aA0KPiBkaWZmIC0tZ2l0IGEvdG9vbHMvbGlieGwvbGli eGxfZG0uYyBiL3Rvb2xzL2xpYnhsL2xpYnhsX2RtLmMNCj4gaW5kZXggMjZlYjE2YWYzNC4uYWQz ZWZjYzc4MyAxMDA2NDQNCj4gLS0tIGEvdG9vbHMvbGlieGwvbGlieGxfZG0uYw0KPiArKysgYi90 b29scy9saWJ4bC9saWJ4bF9kbS5jDQo+IEBAIC0xNDEwLDkgKzE0MTAsNDggQEAgc3RhdGljIGlu dA0KPiBsaWJ4bF9fYnVpbGRfZGV2aWNlX21vZGVsX2FyZ3NfbmV3KGxpYnhsX19nYyAqZ2MsDQo+ ICAgICAgICAgIH0NCj4gICAgICB9DQo+IA0KPiAtICAgIGlmIChsaWJ4bF9kZWZib29sX3ZhbChi X2luZm8tPmRtX3Jlc3RyaWN0KSkNCj4gKyAgICBpZiAobGlieGxfZGVmYm9vbF92YWwoYl9pbmZv LT5kbV9yZXN0cmljdCkpIHsNCj4gKyAgICAgICAgY2hhciAqY2hyb290X2RpciA9IEdDU1BSSU5U RigiJXMvcWVtdS1yb290LSVkIiwNCj4gKyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgbGlieGxfX3J1bl9kaXJfcGF0aCgpLA0KPiBndWVzdF9kb21pZCk7DQo+ICsgICAgICAg IGludCByOw0KPiArDQo+ICAgICAgICAgIGZsZXhhcnJheV9hcHBlbmQoZG1fYXJncywgIi14ZW4t ZG9taWQtcmVzdHJpY3QiKTsNCj4gDQo+ICsgICAgICAgIC8qDQo+ICsgICAgICAgICAqIFJ1biBR RU1VIGluIGEgY2hyb290IGF0IFhFTl9SVU5fRElSL3FlbXUtcm9vdC0lZA0KDQpNYXliZSAnPGRv bWlkPicgaW4gdGhlIGNvbW1lbnQgcmF0aGVyIHRoYW4gJyVkJz8NCg0KPiArICAgICAgICAgKg0K PiArICAgICAgICAgKiBUaGVyZSBpcyBubyBsaWJyYXJ5IGZ1bmN0aW9uIHRvIGRvIHRoZSBlcXVp dmFsZW50IG9mIGBybQ0KPiArICAgICAgICAgKiAtcmZgLiAgSG93ZXZlciBkZXByaXZpbGVnZWQg UUVNVSBpbiB0aGVvcnkgc2hvdWxkbid0IGJlDQo+ICsgICAgICAgICAqIGFibGUgdG8gd3JpdGUg YW55IGZpbGVzLCBhcyB0aGUgY2hyb290IHdvdWxkIGJlIG93bmVkIGJ5DQo+ICsgICAgICAgICAq IHJvb3QsIGJ1dCBpdCB3b3VsZCBiZSBydW5uaW5nIGFzIGFuIHVucHJpdmlsZWdlZCBwcm9jZXNz Lg0KPiArICAgICAgICAgKiBTbyBpbiB0aGVvcnksIG9sZCBjaHJvb3RzIHNob3VsZCBhbHdheXMg YmUgZW1wdHkuDQoNCkhvdyBkb2VzIGxvZ2dpbmcgd29yayBpZiBRRU1VIGNhbid0IHdyaXRlIHRv IHRoZSBjaHJvb3Q/IEkgYXNzdW1lIHdlIGFyZSByZWx5aW5nIG9uIHN0ZGVycj8gRG9lcyB1c2lu ZyBzeXNsb2cgc3RpbGwgd29yaz8NCg0KICBQYXVsDQoNCj4gKyAgICAgICAgICoNCj4gKyAgICAg ICAgICogcm1kaXIgdGhlIGRpcmVjdG9yeSBiZWZvcmUgYXR0ZW1wdGluZyB0byBjcmVhdGUNCj4g KyAgICAgICAgICogaXQ7IGlmIGl0IHJldHVybnMgYW55dGhpbmcgb3RoZXIgdGhhbiBFTk9FTlQs IGZhaWwgZG9tYWluDQo+ICsgICAgICAgICAqIGNyZWF0aW9uLg0KPiArICAgICAgICAgKi8NCj4g KyAgICAgICAgciA9IHJtZGlyKGNocm9vdF9kaXIpOw0KPiArICAgICAgICBpZiAociAhPSAwICYm IGVycm5vICE9IEVOT0VOVCkgew0KPiArICAgICAgICAgICAgTE9HRUQoRVJST1IsIGd1ZXN0X2Rv bWlkLA0KPiArICAgICAgICAgICAgICAgICAgImZhaWxlZCB0byByZW1vdmUgZXhpc3RpbmcgY2hy b290IGRpciAlcyIsIGNocm9vdF9kaXIpOw0KPiArICAgICAgICAgICAgcmV0dXJuIEVSUk9SX0ZB SUw7DQo+ICsgICAgICAgIH0NCj4gKw0KPiArICAgICAgICBmb3IgKDs7KSB7DQo+ICsgICAgICAg ICAgICByID0gbWtkaXIoY2hyb290X2RpciwgMDAwMCk7DQo+ICsgICAgICAgICAgICBpZiAoIXIp DQo+ICsgICAgICAgICAgICAgICAgYnJlYWs7DQo+ICsgICAgICAgICAgICBpZiAoZXJybm8gPT0g RUlOVFIpIGNvbnRpbnVlOw0KPiArICAgICAgICAgICAgTE9HRUQoRVJST1IsIGd1ZXN0X2RvbWlk LA0KPiArICAgICAgICAgICAgICAgICAgImZhaWxlZCB0byBjcmVhdGUgY2hyb290IGRpciAlcyIs IGNocm9vdF9kaXIpOw0KPiArICAgICAgICAgICAgcmV0dXJuIEVSUk9SX0ZBSUw7DQo+ICsgICAg ICAgIH0NCj4gKw0KPiArICAgICAgICAvKiBBZGQgIi1jaHJvb3QgW2Rpcl0iIHRvIGNvbW1hbmQt bGluZSAqLw0KPiArICAgICAgICBmbGV4YXJyYXlfYXBwZW5kKGRtX2FyZ3MsICItY2hyb290Iik7 DQo+ICsgICAgICAgIGZsZXhhcnJheV9hcHBlbmQoZG1fYXJncywgY2hyb290X2Rpcik7DQo+ICsg ICAgfQ0KPiArDQo+ICAgICAgaWYgKHN0YXRlLT5zYXZlZF9zdGF0ZSkgew0KPiAgICAgICAgICAv KiBUaGlzIGZpbGUgZGVzY3JpcHRvciBpcyBtZWFudCB0byBiZSB1c2VkIGJ5IFFFTVUgKi8NCj4g ICAgICAgICAgKmRtX3N0YXRlX2ZkID0gb3BlbihzdGF0ZS0+c2F2ZWRfc3RhdGUsIE9fUkRPTkxZ KTsNCj4gLS0NCj4gMi4xOS4xDQo+IA0KPiANCj4gX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX18NCj4gWGVuLWRldmVsIG1haWxpbmcgbGlzdA0KPiBYZW4tZGV2 ZWxAbGlzdHMueGVucHJvamVjdC5vcmcNCj4gaHR0cHM6Ly9saXN0cy54ZW5wcm9qZWN0Lm9yZy9t YWlsbWFuL2xpc3RpbmZvL3hlbi1kZXZlbA0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX18KWGVuLWRldmVsIG1haWxpbmcgbGlzdApYZW4tZGV2ZWxAbGlzdHMu eGVucHJvamVjdC5vcmcKaHR0cHM6Ly9saXN0cy54ZW5wcm9qZWN0Lm9yZy9tYWlsbWFuL2xpc3Rp bmZvL3hlbi1kZXZlbA==