Commit Graph

588 Commits

Author SHA1 Message Date
Rafal Wojtczuk
e7d2eefecd qrexec: fix stdout flush on process exit
In case a child of qrexec_daemon has exited and there is still data in its
stdout pipe, we need to flush it to the peer. Previously, the case when the
peer is blocked was not handled; it is now. The bug impact was premature EOF.
2011-05-23 15:35:40 +02:00
Rafal Wojtczuk
c677f1cc4e qrexec and qfile-*: compile with -pie
For full ASLR.
2011-05-10 12:19:28 +02:00
Rafal Wojtczuk
7bc7dc6294 qubes_netwatcher: expand a note about NETCFG untrusted origin 2011-05-09 16:26:48 +02:00
Rafal Wojtczuk
adad94cb09 qubes_netwatcher: add a note about NETCFG untrusted origin 2011-05-09 16:23:52 +02:00
Rafal Wojtczuk
8733c0ef77 qrexec_daemon: fixed typo in msg name 2011-05-09 13:31:38 +02:00
Rafal Wojtczuk
7294f8f345 qfile-unpacker: prefix all variables with untrusted_ 2011-05-09 11:02:40 +02:00
Rafal Wojtczuk
6067be29df qmemman: add comments, make some identifiers more verbose 2011-05-04 17:58:28 +02:00
Rafal Wojtczuk
18e207cbc5 qmemman: prefix variables read from xenstore with "untrusted_"
Additionally move all already existing checks to an already
existing is_meminfo_suspicious procedure.
2011-05-04 17:10:01 +02:00
Rafal Wojtczuk
d84289f983 qrexec - indentation 2011-05-04 13:00:39 +02:00
Rafal Wojtczuk
b4fb7a4b5d qrexec: added two I/O error checks, even though it is redundant in these cases 2011-05-04 12:56:52 +02:00
Rafal Wojtczuk
d68183da0c qrexec: added comments, made identifiers more verbose 2011-05-04 12:52:54 +02:00
Rafal Wojtczuk
675d4ce25b qrexec_daemon: add explicite sanitize routine
It sanitizes messages from agent, the only untrusted input. No new
checks have been added, just moved the code.
2011-05-04 10:53:43 +02:00
Joanna Rutkowska
94c4ca27dd version 1.5.22-dom0 2011-04-11 22:02:53 +02:00
Joanna Rutkowska
95488dc59e Pass --level 5 for chkconfigs in core-dom0 post 2011-04-11 14:47:02 +02:00
Joanna Rutkowska
ce7fa7474f vaio_fixes: pass special option to snd-hda-intel module (required to get sound on Vaio Z) 2011-04-11 11:35:25 +02:00
Joanna Rutkowska
612228cea6 version 1.5.21 2011-04-10 22:55:13 +02:00
Joanna Rutkowska
16a58fc7ee v1.5.21-dom0 2011-04-10 22:54:17 +02:00
Joanna Rutkowska
cc83e31047 Merge branch 'master' of git.qubes-os.org:/var/lib/qubes/git/marmarek/core 2011-04-10 22:52:07 +02:00
Marek Marczykowski
ba07c11237 Create ~/.local/share dir, as gnote requires it. 2011-04-10 22:12:04 +02:00
Marek Marczykowski
8dc50df12b Missing vm name in message 2011-04-10 21:49:13 +02:00
Rafal Wojtczuk
7b43755f33 qfile-daemon-dvm: increase timeout of tray notification 2011-04-10 15:39:35 +02:00
Rafal Wojtczuk
e6cc7b84d8 qubes_setupdvm: preserve mtime of the default savefile copy in shm
Otherwise, if the savefile is stale, we would use it instead of
recreating.
2011-04-10 15:18:17 +02:00
Joanna Rutkowska
6e500fc733 version 1.5.20-dom0 2011-04-08 23:37:16 +02:00
Joanna Rutkowska
35bd7db647 Do not restart qubes core in Xen triggers
This is an attempt to figure out why qubes-core-dom0 update still
causes VM restart...?
2011-04-08 23:33:52 +02:00
Joanna Rutkowska
1ba809fdf2 version 1.5.19-dom0 2011-04-08 23:18:40 +02:00
Joanna Rutkowska
ddd8dabe12 vaio-fixes: automaitcally add i8042.nopnp kernel arg to grub
This is needed to get Sony Vaio Z touchpad working
2011-04-08 23:18:28 +02:00
Joanna Rutkowska
2387a17e6a version 1.5.18-dom0 2011-04-08 23:00:32 +02:00
Joanna Rutkowska
1d97d1bd0f Don't create DispVM savefile in initd script 2011-04-08 23:00:10 +02:00
Joanna Rutkowska
4062683ef4 Revert "Removed qubes_setupdvm script from package"
This reverts commit 8ddb8593cb.

Actually we need this script...
2011-04-08 22:57:11 +02:00
Joanna Rutkowska
9f1c226e17 vaio-fixes rpm requires alsa-utils 2011-04-08 22:52:49 +02:00
Joanna Rutkowska
b9f6962716 Merge branch 'master' of git.qubes-os.org:/var/lib/qubes/git/marmarek/core 2011-04-08 22:50:57 +02:00
Marek Marczykowski
4ae804b3ec Wait for qubes-session initialization before executing GUI application (#208) 2011-04-08 22:35:31 +02:00
Marek Marczykowski
0dc4fb929e Backup kernel+initrd of StandaloneVM (#213) 2011-04-08 20:03:38 +02:00
Joanna Rutkowska
304c27313a qubes.py: handle nicely situation when create_appmenus exits with error 2011-04-08 16:00:14 +02:00
Joanna Rutkowska
a09cef1027 version 1.5.16-dom0 2011-04-08 11:03:22 +02:00
Joanna Rutkowska
670f034ee9 Igonre the 'run as root' warning for qvm-create-default-dvm 2011-04-08 11:03:00 +02:00
Joanna Rutkowska
739a7d97c0 version 1.5.15 2011-04-07 19:40:48 +02:00
Joanna Rutkowska
f6d4f86edc Merge branch 'master' of git.qubes-os.org:/var/lib/qubes/git/marmarek/core
Conflicts:
	rpm_spec/core-dom0.spec
2011-04-07 19:39:42 +02:00
Joanna Rutkowska
7097cfa2ac Add explanations why we don't isolate root from user in VMs and in Dom0 2011-04-07 19:38:02 +02:00
Marek Marczykowski
a610ec51d0 Automaticaly start qubes_guid for all VMs when user logon
This is needed ex for NetVM, which is started without qubes_guid
2011-04-07 19:23:23 +02:00
Joanna Rutkowska
80068af4a5 Merge branch 'master' of git.qubes-os.org:/var/lib/qubes/git/marmarek/core 2011-04-07 19:17:14 +02:00
Marek Marczykowski
bd56c4709f Allow normal user to read xenstore values
This is needed by qubes-session
2011-04-07 18:43:52 +02:00
Joanna Rutkowska
f5aaf4426f version 1.5.14 2011-04-07 14:23:34 +02:00
Joanna Rutkowska
ae9288dd5c Merge branch 'master' of git.qubes-os.org:/var/lib/qubes/git/marmarek/core 2011-04-07 14:21:06 +02:00
Marek Marczykowski
2f5b6e6582 Run nm-applet as normal user
Configuration for D-Bus policy and PolicyKit to allow this.
2011-04-07 14:11:00 +02:00
Joanna Rutkowska
2230e67a39 Optional package with suspend fixes for Vaio Z laptops 2011-04-07 13:34:17 +02:00
Joanna Rutkowska
d90040a726 Merge branch 'master' of git.qubes-os.org:/var/lib/qubes/git/marmarek/core 2011-04-07 12:43:51 +02:00
Marek Marczykowski
4d3b9b0654 Disable gpk-update-icon autostart 2011-04-07 12:40:19 +02:00
Marek Marczykowski
83c877189d Revert password removal for root and user
It will require some additional work with ConsoleKit...
2011-04-07 12:39:10 +02:00
Marek Marczykowski
e9c6dc387e Fixed getting VMs connected to NetVM (#172) 2011-04-07 10:42:24 +02:00