 Home |
Products |
Support |
Community |
News |
xen-devel
Re: [Xen-devel] [PATCH] xenstored: allow guests to reintroduce themselve
| To: | Vincent Hanquez <vincent.hanquez@xxxxxxxxxxxxx>, Olaf Hering <olaf@xxxxxxxxx> |
|---|---|
| Subject: | Re: [Xen-devel] [PATCH] xenstored: allow guests to reintroduce themselves |
| From: | Keir Fraser <keir@xxxxxxx> |
| Date: | Tue, 09 Aug 2011 11:14:38 +0100 |
| Cc: | "xen-devel@xxxxxxxxxxxxxxxxxxx" <xen-devel@xxxxxxxxxxxxxxxxxxx> |
| Delivery-date: | Tue, 09 Aug 2011 03:17:12 -0700 |
| Dkim-signature: | v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=sender:user-agent:date:subject:from:to:cc:message-id:thread-topic :thread-index:in-reply-to:mime-version:content-type :content-transfer-encoding; bh=HU7AQM06x4Jd06gKNM0J6JfawUxGpKNQbEJ8A9IS94I=; b=Rx5tZNhpf/PVAShcddXNncT/+UEOfieH1ARmCZTujf6Lgfm/ylKWS3MXRT3eUFd5L3 CfP5hwSc/bLmmW7df7k9c7LsP+wvBmG8/DpkLCchAQeYEsRI/Abgo7hDLWnZmDG0TazS 7UXnPPDexGcVTCZKcJftX83FNb6mxLqr/L9U4= |
| Envelope-to: | www-data@xxxxxxxxxxxxxxxxxxx |
| In-reply-to: | <4E41070D.8020009@xxxxxxxxxxxxx> |
| List-help: | <mailto:xen-devel-request@lists.xensource.com?subject=help> |
| List-id: | Xen developer discussion <xen-devel.lists.xensource.com> |
| List-post: | <mailto:xen-devel@lists.xensource.com> |
| List-subscribe: | <http://lists.xensource.com/mailman/listinfo/xen-devel>, <mailto:xen-devel-request@lists.xensource.com?subject=subscribe> |
| List-unsubscribe: | <http://lists.xensource.com/mailman/listinfo/xen-devel>, <mailto:xen-devel-request@lists.xensource.com?subject=unsubscribe> |
| Sender: | xen-devel-bounces@xxxxxxxxxxxxxxxxxxx |
| Thread-index: | AcxWfSUVXJXrFyVQoESK0QYFzXjhPA== |
| Thread-topic: | [Xen-devel] [PATCH] xenstored: allow guests to reintroduce themselves |
| User-agent: | Microsoft-Entourage/12.30.0.110427 |
On 09/08/2011 11:08, "Vincent Hanquez" <vincent.hanquez@xxxxxxxxxxxxx> wrote: >> xenstored: allow guests to reintroduce themselves >> >> During kexec all old watches have to be removed, otherwise the new >> kernel will receive unexpected events. Allow a guest to introduce itself >> and cleanup all of its watches. > > What about security wise ? > > Guest userspace suddenly becomes able to do this operation (and DoS themself) > where they used to be limited to normal read/write/.. operations. Guest userspace can already DoS the guest if it has access to xenstore, by messing with xenbus I/O connections, for example. -- Keir > Also you're changing the C xenstored behavior without changing > the OCaml one. _______________________________________________ Xen-devel mailing list Xen-devel@xxxxxxxxxxxxxxxxxxx http://lists.xensource.com/xen-devel |
| Previous by Date: | [Xen-devel] Library APIs to register xenstore watch for a DomU guest power off/on, veerasena reddy |
|---|---|
| Next by Date: | Re: [Xen-devel] [xen-unstable bisection] complete test-amd64-i386-xl, Keir Fraser |
| Previous by Thread: | Re: [Xen-devel] [PATCH] xenstored: allow guests to reintroduce themselves, Vincent Hanquez |
| Next by Thread: | Re: [Xen-devel] [PATCH] xenstored: allow guests to reintroduce themselves, Vincent Hanquez |
| Indexes: | [Date] [Thread] [Top] [All Lists] |
