Re: [Xen-devel] [PATCH] pv-grub: Support bzip2, xz and lzo compressed kernels

[Bastian Blank <bastian@xxxxxxxxxxxx>]

On Fri, Jan 04, 2013 at 12:40:20PM +0000, Ian Campbell wrote:
> On Fri, 2013-01-04 at 12:33 +0000, Bastian Blank wrote:
> > Is there a reason not to use the implementations used by the hypervisor?
> Decompressing a potentially untrusted compressed file in the context of
> the hypervisor would open you up to all sorts of security issues. One of
> the points of pv-grub is that the untrusted code runs only with guest
> privileges.

This was not what I meant, but you realized that already.

Anyway, I have some not really nice patches that integrate the
hypervisor bzip2, lzma, xz and lzo code into pv-grub. gzip is not
handled via this code path.

Bastian

-- 
Insufficient facts always invite danger.
                -- Spock, "Space Seed", stardate 3141.9

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxx
http://lists.xen.org/xen-devel