Rafal Wojtczuk
e7d2eefecd
qrexec: fix stdout flush on process exit
...
In case a child of qrexec_daemon has exited and there is still data in its
stdout pipe, we need to flush it to the peer. Previously, the case when the
peer is blocked was not handled; it is now. The bug impact was premature EOF.
2011-05-23 15:35:40 +02:00
Rafal Wojtczuk
c677f1cc4e
qrexec and qfile-*: compile with -pie
...
For full ASLR.
2011-05-10 12:19:28 +02:00
Rafal Wojtczuk
7bc7dc6294
qubes_netwatcher: expand a note about NETCFG untrusted origin
2011-05-09 16:26:48 +02:00
Rafal Wojtczuk
adad94cb09
qubes_netwatcher: add a note about NETCFG untrusted origin
2011-05-09 16:23:52 +02:00
Rafal Wojtczuk
8733c0ef77
qrexec_daemon: fixed typo in msg name
2011-05-09 13:31:38 +02:00
Rafal Wojtczuk
7294f8f345
qfile-unpacker: prefix all variables with untrusted_
2011-05-09 11:02:40 +02:00
Rafal Wojtczuk
6067be29df
qmemman: add comments, make some identifiers more verbose
2011-05-04 17:58:28 +02:00
Rafal Wojtczuk
18e207cbc5
qmemman: prefix variables read from xenstore with "untrusted_"
...
Additionally move all already existing checks to an already
existing is_meminfo_suspicious procedure.
2011-05-04 17:10:01 +02:00
Rafal Wojtczuk
d84289f983
qrexec - indentation
2011-05-04 13:00:39 +02:00
Rafal Wojtczuk
b4fb7a4b5d
qrexec: added two I/O error checks, even though it is redundant in these cases
2011-05-04 12:56:52 +02:00
Rafal Wojtczuk
d68183da0c
qrexec: added comments, made identifiers more verbose
2011-05-04 12:52:54 +02:00
Rafal Wojtczuk
675d4ce25b
qrexec_daemon: add explicite sanitize routine
...
It sanitizes messages from agent, the only untrusted input. No new
checks have been added, just moved the code.
2011-05-04 10:53:43 +02:00
Joanna Rutkowska
94c4ca27dd
version 1.5.22-dom0
2011-04-11 22:02:53 +02:00
Joanna Rutkowska
95488dc59e
Pass --level 5 for chkconfigs in core-dom0 post
2011-04-11 14:47:02 +02:00
Joanna Rutkowska
ce7fa7474f
vaio_fixes: pass special option to snd-hda-intel module (required to get sound on Vaio Z)
2011-04-11 11:35:25 +02:00
Joanna Rutkowska
612228cea6
version 1.5.21
2011-04-10 22:55:13 +02:00
Joanna Rutkowska
16a58fc7ee
v1.5.21-dom0
2011-04-10 22:54:17 +02:00
Joanna Rutkowska
cc83e31047
Merge branch 'master' of git.qubes-os.org:/var/lib/qubes/git/marmarek/core
2011-04-10 22:52:07 +02:00
Marek Marczykowski
ba07c11237
Create ~/.local/share dir, as gnote requires it.
2011-04-10 22:12:04 +02:00
Marek Marczykowski
8dc50df12b
Missing vm name in message
2011-04-10 21:49:13 +02:00
Rafal Wojtczuk
7b43755f33
qfile-daemon-dvm: increase timeout of tray notification
2011-04-10 15:39:35 +02:00
Rafal Wojtczuk
e6cc7b84d8
qubes_setupdvm: preserve mtime of the default savefile copy in shm
...
Otherwise, if the savefile is stale, we would use it instead of
recreating.
2011-04-10 15:18:17 +02:00
Joanna Rutkowska
6e500fc733
version 1.5.20-dom0
2011-04-08 23:37:16 +02:00
Joanna Rutkowska
35bd7db647
Do not restart qubes core in Xen triggers
...
This is an attempt to figure out why qubes-core-dom0 update still
causes VM restart...?
2011-04-08 23:33:52 +02:00
Joanna Rutkowska
1ba809fdf2
version 1.5.19-dom0
2011-04-08 23:18:40 +02:00
Joanna Rutkowska
ddd8dabe12
vaio-fixes: automaitcally add i8042.nopnp kernel arg to grub
...
This is needed to get Sony Vaio Z touchpad working
2011-04-08 23:18:28 +02:00
Joanna Rutkowska
2387a17e6a
version 1.5.18-dom0
2011-04-08 23:00:32 +02:00
Joanna Rutkowska
1d97d1bd0f
Don't create DispVM savefile in initd script
2011-04-08 23:00:10 +02:00
Joanna Rutkowska
4062683ef4
Revert "Removed qubes_setupdvm script from package"
...
This reverts commit 8ddb8593cb
.
Actually we need this script...
2011-04-08 22:57:11 +02:00
Joanna Rutkowska
9f1c226e17
vaio-fixes rpm requires alsa-utils
2011-04-08 22:52:49 +02:00
Joanna Rutkowska
b9f6962716
Merge branch 'master' of git.qubes-os.org:/var/lib/qubes/git/marmarek/core
2011-04-08 22:50:57 +02:00
Marek Marczykowski
4ae804b3ec
Wait for qubes-session initialization before executing GUI application ( #208 )
2011-04-08 22:35:31 +02:00
Marek Marczykowski
0dc4fb929e
Backup kernel+initrd of StandaloneVM ( #213 )
2011-04-08 20:03:38 +02:00
Joanna Rutkowska
304c27313a
qubes.py: handle nicely situation when create_appmenus exits with error
2011-04-08 16:00:14 +02:00
Joanna Rutkowska
a09cef1027
version 1.5.16-dom0
2011-04-08 11:03:22 +02:00
Joanna Rutkowska
670f034ee9
Igonre the 'run as root' warning for qvm-create-default-dvm
2011-04-08 11:03:00 +02:00
Joanna Rutkowska
739a7d97c0
version 1.5.15
2011-04-07 19:40:48 +02:00
Joanna Rutkowska
f6d4f86edc
Merge branch 'master' of git.qubes-os.org:/var/lib/qubes/git/marmarek/core
...
Conflicts:
rpm_spec/core-dom0.spec
2011-04-07 19:39:42 +02:00
Joanna Rutkowska
7097cfa2ac
Add explanations why we don't isolate root from user in VMs and in Dom0
2011-04-07 19:38:02 +02:00
Marek Marczykowski
a610ec51d0
Automaticaly start qubes_guid for all VMs when user logon
...
This is needed ex for NetVM, which is started without qubes_guid
2011-04-07 19:23:23 +02:00
Joanna Rutkowska
80068af4a5
Merge branch 'master' of git.qubes-os.org:/var/lib/qubes/git/marmarek/core
2011-04-07 19:17:14 +02:00
Marek Marczykowski
bd56c4709f
Allow normal user to read xenstore values
...
This is needed by qubes-session
2011-04-07 18:43:52 +02:00
Joanna Rutkowska
f5aaf4426f
version 1.5.14
2011-04-07 14:23:34 +02:00
Joanna Rutkowska
ae9288dd5c
Merge branch 'master' of git.qubes-os.org:/var/lib/qubes/git/marmarek/core
2011-04-07 14:21:06 +02:00
Marek Marczykowski
2f5b6e6582
Run nm-applet as normal user
...
Configuration for D-Bus policy and PolicyKit to allow this.
2011-04-07 14:11:00 +02:00
Joanna Rutkowska
2230e67a39
Optional package with suspend fixes for Vaio Z laptops
2011-04-07 13:34:17 +02:00
Joanna Rutkowska
d90040a726
Merge branch 'master' of git.qubes-os.org:/var/lib/qubes/git/marmarek/core
2011-04-07 12:43:51 +02:00
Marek Marczykowski
4d3b9b0654
Disable gpk-update-icon autostart
2011-04-07 12:40:19 +02:00
Marek Marczykowski
83c877189d
Revert password removal for root and user
...
It will require some additional work with ConsoleKit...
2011-04-07 12:39:10 +02:00
Marek Marczykowski
e9c6dc387e
Fixed getting VMs connected to NetVM ( #172 )
2011-04-07 10:42:24 +02:00