Rafal Wojtczuk
4a5f42980b
Add comments to policy files.
2011-07-22 16:11:03 +02:00
Rafal Wojtczuk
b4afa5fe63
qrexec: use $anyvm and $dispvm symbols
2011-07-22 16:07:06 +02:00
Marek Marczykowski
4da05e52d8
vm: more reliably set IP address of VM
2011-07-14 02:11:43 +02:00
Marek Marczykowski
37aed29a41
gitignore
2011-07-10 12:47:09 +02:00
Marek Marczykowski
38ad0a52e3
vm: Fix IP address of DispVM after restore ( #247 )
...
IP was set by udev script only on VM start, not restore
2011-07-09 17:54:47 +02:00
Rafal Wojtczuk
f8d3c0df21
qrexec: git add missing files
2011-07-07 11:17:00 +02:00
Rafal Wojtczuk
3ea7aca257
qrexec: change qrexec_client_vm syntax to be nicer to read
...
Now the local_program is just before arguments, which is nicer.
2011-07-06 14:21:35 +02:00
Rafal Wojtczuk
dc33f0c9a7
qrexec: adjust DispVM code to the new qrexec API
...
Note, we have qvm-open-in-vm totally for free.
2011-07-06 12:32:20 +02:00
Rafal Wojtczuk
b87da183ce
qrexec: adjust intervm file copy code to the new qrexec API
2011-07-06 10:17:58 +02:00
Marek Marczykowski
f564a4d143
dom0+vm: Tools for downloading dom0 update by VM ( #198 )
...
Mainly 4 parts:
- scripts for providing rpmdb and yum repos to VM (choosen by qvm-set-updatevm)
- VM script for downloading updates (qubes_download_dom0_updates.sh)
- qfile-dom0-unpacker which receive updates, check signatures and place its in dom0 local yum repo
- qvm-dom0-upgrade which calls all of above and after all yum gpk-update-viewer
Besides qvm-dom0-upgrade, updates are checked every 6h and user is prompted if
want to download it. At dom0 side gpk-update-icon (disabled yet) should notice
new updates in "local" repo.
2011-06-22 00:44:48 +02:00
Marek Marczykowski
65f9b1669e
Merge branch 'r1-beta1-fixes'
2011-05-26 11:46:31 +02:00
Marek Marczykowski
85f3165513
vm: Fix open() result checking
2011-05-26 11:45:51 +02:00
Marek Marczykowski
e787cc1f68
Merge branch 'r1-beta1-fixes'
2011-05-26 00:31:15 +02:00
Marek Marczykowski
96774caf51
vm: verify files copied with qvm-copy-to-vm using crc32
...
Additionally this introduces notification for qfile-agent when remote end
finished file writing.
2011-05-26 00:29:52 +02:00
Marek Marczykowski
a1e1112b28
vm: Use variables in Makefile gcc command
2011-05-26 00:10:04 +02:00
Marek Marczykowski
1c1e4362b0
Merge branch 'r1-beta1-fixes'
...
Conflicts:
dom0/qvm-core/qubes.py
version_dom0
version_vm
2011-05-24 00:20:39 +02:00
Timo Juhani Lindfors
a49e8e8c18
Add _GNU_SOURCE to get O_NOFOLLOW on debian squeeze.
2011-05-13 14:16:11 +02:00
Joanna Rutkowska
f368d16d8c
Merge branch 'sane-and-pretty' of git.qubes-os.org:/var/lib/qubes/git/rafal/core into r1-beta1
2011-05-10 12:41:00 +02:00
Rafal Wojtczuk
6a6b140c43
qrexec and qfile-*: compile with -pie
...
For full ASLR.
2011-05-10 12:19:28 +02:00
Marek Marczykowski
a2598eae73
Run qubes_core_appvm also in TemplateVM ( #222 )
2011-05-10 00:53:38 +02:00
Marek Marczykowski
432a44be40
Fix typo
2011-05-10 00:53:33 +02:00
Marek Marczykowski
b83c92fb56
Merge branch 'sane-and-pretty' of ssh://git.qubes-os.org/var/lib/qubes/git/rafal/core
2011-05-09 12:25:14 +02:00
Rafal Wojtczuk
0d785fcbf8
qfile-unpacker: prefix all variables with untrusted_
2011-05-09 11:02:40 +02:00
Marek Marczykowski
692b97db38
Run qubes_core_appvm also in TemplateVM ( #222 )
2011-04-19 13:10:18 +02:00
Marek Marczykowski
c132b70856
Fix typo
2011-04-19 13:07:13 +02:00
Marek Marczykowski
e7bb4843ea
Show progress of qvm-copy-to-vm by default ( #221 )
2011-04-19 13:06:34 +02:00
Joanna Rutkowska
7d2c23aa80
Add explanations why we don't isolate root from user in VMs and in Dom0
2011-04-07 19:38:02 +02:00
Marek Marczykowski
a4b724fdab
Remove passwords prompts for user and root ( #202 )
2011-04-06 23:04:42 +02:00
Joanna Rutkowska
21e0c9d3f7
commonvm: Update repo info, use local RPM keys
2011-04-04 11:27:48 +02:00
Joanna Rutkowska
d9c9e802d4
Move nautilus scripts creation to qubes_core
...
qubes_core_appvm executes too early, when /home is still not symlinked to /rw/home.
2011-03-31 15:15:10 +02:00
Joanna Rutkowska
60757bd430
Autoclose file copy progress dialog
2011-03-31 15:03:25 +02:00
Joanna Rutkowska
a27dc31d71
Display name of the destVM in copy progress dialog
2011-03-31 14:44:48 +02:00
Joanna Rutkowska
8078cc0588
Fix syntax error that prevent zenity copy progress dialog to appear
2011-03-31 14:43:47 +02:00
Joanna Rutkowska
a1a7cad3d2
On each startup check if user has symlinks for nautilus qubes-specific actions
...
Create symlinks if not. This is useful when migrating from old templates (#163 )
2011-03-31 13:53:11 +02:00
Joanna Rutkowska
b3800a59f1
Ident fixes
2011-03-31 13:44:14 +02:00
Joanna Rutkowska
90423aae41
Use zenity instead of kdialog in appvm code
2011-03-31 13:26:41 +02:00
Rafal Wojtczuk
4e332ab244
Actually add appvm/qvm-copy-to-vm
2011-03-30 17:27:04 +02:00
Rafal Wojtczuk
0e7bd73d22
Renamed qvm-copy-to-vm2 to qvm-trigger-copy-to-vm
...
The new name describes the task of the script better.
2011-03-30 16:48:48 +02:00
Rafal Wojtczuk
d82c597c82
qvm-copy-to-vm2.kde: calculate size of sparse files correctly
2011-03-30 10:30:27 +02:00
Rafal Wojtczuk
0851d12be9
qvm-copy-to-vm2.kde: prepare for a race in PROGRESS_FILE creation
...
Apparently a tight race may happen when PROGRESS_FILE has been created,
but not yet written to by qfile-agent. Check if its content are
sane before use.
2011-03-30 10:28:25 +02:00
Rafal Wojtczuk
9f0d84a528
qfile-copy: try to produce only one error message
2011-03-29 13:05:57 +02:00
Marek Marczykowski
6c2a6d4d4d
Merge branch 'spring-merge' of ssh://git.qubes-os.org/var/lib/qubes/git/rafal/core
2011-03-24 16:43:13 -04:00
Rafal Wojtczuk
81257fff75
Removed obsolete code, in appvm.
2011-03-24 17:13:21 +01:00
Rafal Wojtczuk
582371d190
dvm_file_editor: correctly nuke children's stdin/out/err
2011-03-24 14:33:43 +01:00
Marek Marczykowski
1f92e9f746
gitignores
2011-03-23 19:57:48 -04:00
Rafal Wojtczuk
7fb123db92
Move execution of qrexec_agent to qubes_core
...
Previously it was in both qubes_core_appvm and qubes_core_netvm;
somehow counterintuitively, qubes_core_netvm executes on appvm, too. So
move it to a common place.
2011-03-23 11:34:01 +01:00
Rafal Wojtczuk
dfb499c025
Merge branch 'blockless' into spring-merge
...
Conflicts:
appvm/Makefile
appvm/qubes_core
netvm/qubes_core
rpm_spec/core-appvm.spec
rpm_spec/core-netvm.spec
2011-03-21 13:54:35 +01:00
Rafal Wojtczuk
6f8daea8f2
In qfile-unpacker, set perms on the directory only on second pass.
...
It solves problem with transferring r.x directory. Originally, it
would fail when creating files in the directory (as it is not
writable). Now, we will create it rwx, create files in it, and fix
perms and utimes on the second pass.
[user@devel fcopy]$ ls -ald /boot
dr-xr-xr-x 4 root root 4096 Sep 1 2010 /boot
2011-03-16 12:48:29 +01:00
Rafal Wojtczuk
3ae47689bc
Added qvm-copy-to-vm2.kde
2011-03-16 12:00:22 +01:00
Marek Marczykowski
f25afe989c
Move xenstore-watch for VM from AppVM to common. Add to core-common.spec
2011-03-16 11:41:18 +01:00