core-admin/qubes
Marek Marczykowski-Górecki c534b68665
qubes/vm: start VM daemons as normal user
This is migration of core2 commits:

commit d0ba43f253
Author: Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com>
Date:   Mon Jun 6 02:21:08 2016 +0200

    core: start guid as normal user even when VM started by root

    Another attempt to avoid permissions-related problems...

    QubesOS/qubes-issues#1768

commit 89d002a031
Author: Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com>
Date:   Mon Jun 6 02:19:51 2016 +0200

    core: use runuser instead of sudo for switching root->user

    There are problems with using sudo in early system startup
    (systemd-logind not running yet, pam_systemd timeouts). Since we don't
    need full session here, runuser is good enough (even better: faster).

commit 2265fd3d52
Author: Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com>
Date:   Sat Jun 4 17:42:24 2016 +0200

    core: start qubesdb as normal user, even when VM is started by root

    On VM start, old qubesdb-daemon is terminated (if still running). In
    practice it happen only at VM startart (shutdown and quickly start
    again). But in that case, if the VM was started by root, such operation
    would fail.
    So when VM is started by root, make sure that qubesdb-daemon will be
    running as normal user (the first user in group 'qubes' - there should
    be only one).

    Fixes QubesOS/qubes-issues#1745
2016-09-08 04:17:47 +02:00
..
ext qubes/vm: start VM daemons as normal user 2016-09-08 04:17:47 +02:00
qmemman Fix generating documentation 2016-04-22 15:23:39 +02:00
storage Merge remote-tracking branch 'qubesos/pr/54' into core3-devel 2016-09-04 22:38:06 +02:00
tests Merge branch 'core3-devices' into core3-devel 2016-09-04 21:32:01 +02:00
tools Merge branch 'core3-devices' into core3-devel 2016-09-04 21:32:01 +02:00
vm qubes/vm: start VM daemons as normal user 2016-09-08 04:17:47 +02:00
__init__.py qubes/vm: move misc XML tags loading to separate method 2016-08-18 11:57:11 +02:00
app.py qubes/vm: move misc XML tags loading to separate method 2016-08-18 11:57:11 +02:00
backup.py qubes/backup: better handle restoring kernel=None case 2016-08-17 01:18:11 +02:00
config.py pylint fixes 2016-06-10 21:27:29 +02:00
core2migration.py Fix core2migration and tests for new devices API 2016-09-04 20:55:07 +02:00
devices.py qubes/ext/pci: move PCI devices handling to an extension 2016-09-03 20:41:03 +02:00
dochelpers.py pylint fixes 2016-06-10 21:27:29 +02:00
events.py qubes: new devices API 2016-09-03 20:40:39 +02:00
exc.py core3: add different exceptions 2015-10-17 00:17:12 +02:00
log.py core/log: do not attach multiple handlers to the same logger 2016-03-03 01:18:15 +01:00
rngdoc.py qubes: pylint fixes (small mistakes and wrong names) 2015-06-29 17:39:27 +02:00
utils.py Add qubes.utils.random_string() 2016-08-03 02:57:40 +02:00