Rafal Wojtczuk 
							
						 
					 
					
						
						
						
						
							
						
						
							e7d2eefecd 
							
						 
					 
					
						
						
							
							qrexec: fix stdout flush on process exit  
						
						... 
						
						
						
						In case a child of qrexec_daemon has exited and there is still data in its
stdout pipe, we need to flush it to the peer. Previously, the case when the
peer is blocked was not handled; it is now. The bug impact was premature EOF. 
						
					 
					
						2011-05-23 15:35:40 +02:00 
						 
				 
			
				
					
						
							
							
								Rafal Wojtczuk 
							
						 
					 
					
						
						
						
						
							
						
						
							c677f1cc4e 
							
						 
					 
					
						
						
							
							qrexec and qfile-*: compile with -pie  
						
						... 
						
						
						
						For full ASLR. 
						
					 
					
						2011-05-10 12:19:28 +02:00 
						 
				 
			
				
					
						
							
							
								Rafal Wojtczuk 
							
						 
					 
					
						
						
						
						
							
						
						
							7bc7dc6294 
							
						 
					 
					
						
						
							
							qubes_netwatcher: expand a note about NETCFG untrusted origin  
						
						
						
					 
					
						2011-05-09 16:26:48 +02:00 
						 
				 
			
				
					
						
							
							
								Rafal Wojtczuk 
							
						 
					 
					
						
						
						
						
							
						
						
							adad94cb09 
							
						 
					 
					
						
						
							
							qubes_netwatcher: add a note about NETCFG untrusted origin  
						
						
						
					 
					
						2011-05-09 16:23:52 +02:00 
						 
				 
			
				
					
						
							
							
								Rafal Wojtczuk 
							
						 
					 
					
						
						
						
						
							
						
						
							8733c0ef77 
							
						 
					 
					
						
						
							
							qrexec_daemon: fixed typo in msg name  
						
						
						
					 
					
						2011-05-09 13:31:38 +02:00 
						 
				 
			
				
					
						
							
							
								Rafal Wojtczuk 
							
						 
					 
					
						
						
						
						
							
						
						
							7294f8f345 
							
						 
					 
					
						
						
							
							qfile-unpacker: prefix all variables with untrusted_  
						
						
						
					 
					
						2011-05-09 11:02:40 +02:00 
						 
				 
			
				
					
						
							
							
								Rafal Wojtczuk 
							
						 
					 
					
						
						
						
						
							
						
						
							6067be29df 
							
						 
					 
					
						
						
							
							qmemman: add comments, make some identifiers more verbose  
						
						
						
					 
					
						2011-05-04 17:58:28 +02:00 
						 
				 
			
				
					
						
							
							
								Rafal Wojtczuk 
							
						 
					 
					
						
						
						
						
							
						
						
							18e207cbc5 
							
						 
					 
					
						
						
							
							qmemman: prefix variables read from xenstore with "untrusted_"  
						
						... 
						
						
						
						Additionally move all already existing checks to an already
existing is_meminfo_suspicious procedure. 
						
					 
					
						2011-05-04 17:10:01 +02:00 
						 
				 
			
				
					
						
							
							
								Rafal Wojtczuk 
							
						 
					 
					
						
						
						
						
							
						
						
							d84289f983 
							
						 
					 
					
						
						
							
							qrexec - indentation  
						
						
						
					 
					
						2011-05-04 13:00:39 +02:00 
						 
				 
			
				
					
						
							
							
								Rafal Wojtczuk 
							
						 
					 
					
						
						
						
						
							
						
						
							b4fb7a4b5d 
							
						 
					 
					
						
						
							
							qrexec: added two I/O error checks, even though it is redundant in these cases  
						
						
						
					 
					
						2011-05-04 12:56:52 +02:00 
						 
				 
			
				
					
						
							
							
								Rafal Wojtczuk 
							
						 
					 
					
						
						
						
						
							
						
						
							d68183da0c 
							
						 
					 
					
						
						
							
							qrexec: added comments, made identifiers more verbose  
						
						
						
					 
					
						2011-05-04 12:52:54 +02:00 
						 
				 
			
				
					
						
							
							
								Rafal Wojtczuk 
							
						 
					 
					
						
						
						
						
							
						
						
							675d4ce25b 
							
						 
					 
					
						
						
							
							qrexec_daemon: add explicite sanitize routine  
						
						... 
						
						
						
						It sanitizes messages from agent, the only untrusted input. No new
checks have been added, just moved the code. 
						
					 
					
						2011-05-04 10:53:43 +02:00 
						 
				 
			
				
					
						
							
							
								Joanna Rutkowska 
							
						 
					 
					
						
						
						
						
							
						
						
							94c4ca27dd 
							
						 
					 
					
						
						
							
							version 1.5.22-dom0  
						
						
						
					 
					
						2011-04-11 22:02:53 +02:00 
						 
				 
			
				
					
						
							
							
								Joanna Rutkowska 
							
						 
					 
					
						
						
						
						
							
						
						
							95488dc59e 
							
						 
					 
					
						
						
							
							Pass --level 5 for chkconfigs in core-dom0 post  
						
						
						
					 
					
						2011-04-11 14:47:02 +02:00 
						 
				 
			
				
					
						
							
							
								Joanna Rutkowska 
							
						 
					 
					
						
						
						
						
							
						
						
							ce7fa7474f 
							
						 
					 
					
						
						
							
							vaio_fixes: pass special option to snd-hda-intel module (required to get sound on Vaio Z)  
						
						
						
					 
					
						2011-04-11 11:35:25 +02:00 
						 
				 
			
				
					
						
							
							
								Joanna Rutkowska 
							
						 
					 
					
						
						
						
						
							
						
						
							612228cea6 
							
						 
					 
					
						
						
							
							version 1.5.21  
						
						
						
					 
					
						2011-04-10 22:55:13 +02:00 
						 
				 
			
				
					
						
							
							
								Joanna Rutkowska 
							
						 
					 
					
						
						
						
						
							
						
						
							16a58fc7ee 
							
						 
					 
					
						
						
							
							v1.5.21-dom0  
						
						
						
					 
					
						2011-04-10 22:54:17 +02:00 
						 
				 
			
				
					
						
							
							
								Joanna Rutkowska 
							
						 
					 
					
						
						
						
						
							
						
						
							cc83e31047 
							
						 
					 
					
						
						
							
							Merge branch 'master' of git.qubes-os.org:/var/lib/qubes/git/marmarek/core  
						
						
						
					 
					
						2011-04-10 22:52:07 +02:00 
						 
				 
			
				
					
						
							
							
								Marek Marczykowski 
							
						 
					 
					
						
						
						
						
							
						
						
							ba07c11237 
							
						 
					 
					
						
						
							
							Create ~/.local/share dir, as gnote requires it.  
						
						
						
					 
					
						2011-04-10 22:12:04 +02:00 
						 
				 
			
				
					
						
							
							
								Marek Marczykowski 
							
						 
					 
					
						
						
						
						
							
						
						
							8dc50df12b 
							
						 
					 
					
						
						
							
							Missing vm name in message  
						
						
						
					 
					
						2011-04-10 21:49:13 +02:00 
						 
				 
			
				
					
						
							
							
								Rafal Wojtczuk 
							
						 
					 
					
						
						
						
						
							
						
						
							7b43755f33 
							
						 
					 
					
						
						
							
							qfile-daemon-dvm: increase timeout of tray notification  
						
						
						
					 
					
						2011-04-10 15:39:35 +02:00 
						 
				 
			
				
					
						
							
							
								Rafal Wojtczuk 
							
						 
					 
					
						
						
						
						
							
						
						
							e6cc7b84d8 
							
						 
					 
					
						
						
							
							qubes_setupdvm: preserve mtime of the default savefile copy in shm  
						
						... 
						
						
						
						Otherwise, if the savefile is stale, we would use it instead of
recreating. 
						
					 
					
						2011-04-10 15:18:17 +02:00 
						 
				 
			
				
					
						
							
							
								Joanna Rutkowska 
							
						 
					 
					
						
						
						
						
							
						
						
							6e500fc733 
							
						 
					 
					
						
						
							
							version 1.5.20-dom0  
						
						
						
					 
					
						2011-04-08 23:37:16 +02:00 
						 
				 
			
				
					
						
							
							
								Joanna Rutkowska 
							
						 
					 
					
						
						
						
						
							
						
						
							35bd7db647 
							
						 
					 
					
						
						
							
							Do not restart qubes core in Xen triggers  
						
						... 
						
						
						
						This is an attempt to figure out why qubes-core-dom0 update still
causes VM restart...? 
						
					 
					
						2011-04-08 23:33:52 +02:00 
						 
				 
			
				
					
						
							
							
								Joanna Rutkowska 
							
						 
					 
					
						
						
						
						
							
						
						
							1ba809fdf2 
							
						 
					 
					
						
						
							
							version 1.5.19-dom0  
						
						
						
					 
					
						2011-04-08 23:18:40 +02:00 
						 
				 
			
				
					
						
							
							
								Joanna Rutkowska 
							
						 
					 
					
						
						
						
						
							
						
						
							ddd8dabe12 
							
						 
					 
					
						
						
							
							vaio-fixes: automaitcally add i8042.nopnp kernel arg to grub  
						
						... 
						
						
						
						This is needed to get Sony Vaio Z touchpad working 
						
					 
					
						2011-04-08 23:18:28 +02:00 
						 
				 
			
				
					
						
							
							
								Joanna Rutkowska 
							
						 
					 
					
						
						
						
						
							
						
						
							2387a17e6a 
							
						 
					 
					
						
						
							
							version 1.5.18-dom0  
						
						
						
					 
					
						2011-04-08 23:00:32 +02:00 
						 
				 
			
				
					
						
							
							
								Joanna Rutkowska 
							
						 
					 
					
						
						
						
						
							
						
						
							1d97d1bd0f 
							
						 
					 
					
						
						
							
							Don't create DispVM savefile in initd script  
						
						
						
					 
					
						2011-04-08 23:00:10 +02:00 
						 
				 
			
				
					
						
							
							
								Joanna Rutkowska 
							
						 
					 
					
						
						
						
						
							
						
						
							4062683ef4 
							
						 
					 
					
						
						
							
							Revert "Removed qubes_setupdvm script from package"  
						
						... 
						
						
						
						This reverts commit 8ddb8593cb 
						
					 
					
						2011-04-08 22:57:11 +02:00 
						 
				 
			
				
					
						
							
							
								Joanna Rutkowska 
							
						 
					 
					
						
						
						
						
							
						
						
							9f1c226e17 
							
						 
					 
					
						
						
							
							vaio-fixes rpm requires alsa-utils  
						
						
						
					 
					
						2011-04-08 22:52:49 +02:00 
						 
				 
			
				
					
						
							
							
								Joanna Rutkowska 
							
						 
					 
					
						
						
						
						
							
						
						
							b9f6962716 
							
						 
					 
					
						
						
							
							Merge branch 'master' of git.qubes-os.org:/var/lib/qubes/git/marmarek/core  
						
						
						
					 
					
						2011-04-08 22:50:57 +02:00 
						 
				 
			
				
					
						
							
							
								Marek Marczykowski 
							
						 
					 
					
						
						
						
						
							
						
						
							4ae804b3ec 
							
						 
					 
					
						
						
							
							Wait for qubes-session initialization before executing GUI application ( #208 )  
						
						
						
					 
					
						2011-04-08 22:35:31 +02:00 
						 
				 
			
				
					
						
							
							
								Marek Marczykowski 
							
						 
					 
					
						
						
						
						
							
						
						
							0dc4fb929e 
							
						 
					 
					
						
						
							
							Backup kernel+initrd of StandaloneVM ( #213 )  
						
						
						
					 
					
						2011-04-08 20:03:38 +02:00 
						 
				 
			
				
					
						
							
							
								Joanna Rutkowska 
							
						 
					 
					
						
						
						
						
							
						
						
							304c27313a 
							
						 
					 
					
						
						
							
							qubes.py: handle nicely situation when create_appmenus exits with error  
						
						
						
					 
					
						2011-04-08 16:00:14 +02:00 
						 
				 
			
				
					
						
							
							
								Joanna Rutkowska 
							
						 
					 
					
						
						
						
						
							
						
						
							a09cef1027 
							
						 
					 
					
						
						
							
							version 1.5.16-dom0  
						
						
						
					 
					
						2011-04-08 11:03:22 +02:00 
						 
				 
			
				
					
						
							
							
								Joanna Rutkowska 
							
						 
					 
					
						
						
						
						
							
						
						
							670f034ee9 
							
						 
					 
					
						
						
							
							Igonre the 'run as root' warning for qvm-create-default-dvm  
						
						
						
					 
					
						2011-04-08 11:03:00 +02:00 
						 
				 
			
				
					
						
							
							
								Joanna Rutkowska 
							
						 
					 
					
						
						
						
						
							
						
						
							739a7d97c0 
							
						 
					 
					
						
						
							
							version 1.5.15  
						
						
						
					 
					
						2011-04-07 19:40:48 +02:00 
						 
				 
			
				
					
						
							
							
								Joanna Rutkowska 
							
						 
					 
					
						
						
						
						
							
						
						
							f6d4f86edc 
							
						 
					 
					
						
						
							
							Merge branch 'master' of git.qubes-os.org:/var/lib/qubes/git/marmarek/core  
						
						... 
						
						
						
						Conflicts:
	rpm_spec/core-dom0.spec 
						
					 
					
						2011-04-07 19:39:42 +02:00 
						 
				 
			
				
					
						
							
							
								Joanna Rutkowska 
							
						 
					 
					
						
						
						
						
							
						
						
							7097cfa2ac 
							
						 
					 
					
						
						
							
							Add explanations why we don't isolate root from user in VMs and in Dom0  
						
						
						
					 
					
						2011-04-07 19:38:02 +02:00 
						 
				 
			
				
					
						
							
							
								Marek Marczykowski 
							
						 
					 
					
						
						
						
						
							
						
						
							a610ec51d0 
							
						 
					 
					
						
						
							
							Automaticaly start qubes_guid for all VMs when user logon  
						
						... 
						
						
						
						This is needed ex for NetVM, which is started without qubes_guid 
						
					 
					
						2011-04-07 19:23:23 +02:00 
						 
				 
			
				
					
						
							
							
								Joanna Rutkowska 
							
						 
					 
					
						
						
						
						
							
						
						
							80068af4a5 
							
						 
					 
					
						
						
							
							Merge branch 'master' of git.qubes-os.org:/var/lib/qubes/git/marmarek/core  
						
						
						
					 
					
						2011-04-07 19:17:14 +02:00 
						 
				 
			
				
					
						
							
							
								Marek Marczykowski 
							
						 
					 
					
						
						
						
						
							
						
						
							bd56c4709f 
							
						 
					 
					
						
						
							
							Allow normal user to read xenstore values  
						
						... 
						
						
						
						This is needed by qubes-session 
						
					 
					
						2011-04-07 18:43:52 +02:00 
						 
				 
			
				
					
						
							
							
								Joanna Rutkowska 
							
						 
					 
					
						
						
						
						
							
						
						
							f5aaf4426f 
							
						 
					 
					
						
						
							
							version 1.5.14  
						
						
						
					 
					
						2011-04-07 14:23:34 +02:00 
						 
				 
			
				
					
						
							
							
								Joanna Rutkowska 
							
						 
					 
					
						
						
						
						
							
						
						
							ae9288dd5c 
							
						 
					 
					
						
						
							
							Merge branch 'master' of git.qubes-os.org:/var/lib/qubes/git/marmarek/core  
						
						
						
					 
					
						2011-04-07 14:21:06 +02:00 
						 
				 
			
				
					
						
							
							
								Marek Marczykowski 
							
						 
					 
					
						
						
						
						
							
						
						
							2f5b6e6582 
							
						 
					 
					
						
						
							
							Run nm-applet as normal user  
						
						... 
						
						
						
						Configuration for D-Bus policy and PolicyKit to allow this. 
						
					 
					
						2011-04-07 14:11:00 +02:00 
						 
				 
			
				
					
						
							
							
								Joanna Rutkowska 
							
						 
					 
					
						
						
						
						
							
						
						
							2230e67a39 
							
						 
					 
					
						
						
							
							Optional package with suspend fixes for Vaio Z laptops  
						
						
						
					 
					
						2011-04-07 13:34:17 +02:00 
						 
				 
			
				
					
						
							
							
								Joanna Rutkowska 
							
						 
					 
					
						
						
						
						
							
						
						
							d90040a726 
							
						 
					 
					
						
						
							
							Merge branch 'master' of git.qubes-os.org:/var/lib/qubes/git/marmarek/core  
						
						
						
					 
					
						2011-04-07 12:43:51 +02:00 
						 
				 
			
				
					
						
							
							
								Marek Marczykowski 
							
						 
					 
					
						
						
						
						
							
						
						
							4d3b9b0654 
							
						 
					 
					
						
						
							
							Disable gpk-update-icon autostart  
						
						
						
					 
					
						2011-04-07 12:40:19 +02:00 
						 
				 
			
				
					
						
							
							
								Marek Marczykowski 
							
						 
					 
					
						
						
						
						
							
						
						
							83c877189d 
							
						 
					 
					
						
						
							
							Revert password removal for root and user  
						
						... 
						
						
						
						It will require some additional work with ConsoleKit... 
						
					 
					
						2011-04-07 12:39:10 +02:00 
						 
				 
			
				
					
						
							
							
								Marek Marczykowski 
							
						 
					 
					
						
						
						
						
							
						
						
							e9c6dc387e 
							
						 
					 
					
						
						
							
							Fixed getting VMs connected to NetVM ( #172 )  
						
						
						
					 
					
						2011-04-07 10:42:24 +02:00