search for: xenbak

...ls-3.0.3-1 Version: 3.0.3-0-3 Severity: grave Tags: security Justification: user security hole Xen versions 3.x, and 3.1 contain a tool for processing Xen trace buffer information. This tool uses the static file /tmp/xenq-shm insecurely allowing a local user to truncate any local file when xenbaked or xenmon.py are invoked by root. Sample session: # setup. skx at vain:~$ ln -s /etc/passwd /tmp/xenq-shm # later. skx at vain:~$ sudo xenbaked # all gone. :( skx at vain:~$ ls -l /etc/passwd -rw-r--r-- 1 0 root 327680 2007-10-17 00:14 /etc/passwd This flaw...

Package: xen-utils-4.1 Version: 4.1.4-4 Severity: normal User: mayhem at forallsecure.com Usertags: mayhem xenbaked crashes with exit status 139. We confirmed the crash by re-running it in a fresh debian unstable installation. The attachment [1] contains a testcase (under ./crash) crashing the program. It ensures that you can easily reproduce the bug. Additionally, under ./crash_info/, we include more informa...

Hi, We found a crash in xenbaked contained in the xen-utils-4.1 package. You are being contacted because your are listed as one of the maintainer of xen-utils-4.1. We are planning to submit the bug to the Debian bug tracking system in two weeks. We wanted to give you a heads-up, so that you some time to assess the seriousness o...

Hi, Xenmon does not work correctlly after xentrace changes in cs 17000. Attached patch fixes this problem. This patch modifies access to trace buffer same as tools/xentrace. Signed-off-by: Naoki Nishiguchi <nisiguti@jp.fujitsu.com> Regards, Naoki Nishiguchi _______________________________________________ Xen-devel mailing list Xen-devel@lists.xensource.com

...testing with this patch applied. -- Ryan Harper Software Engineer; Linux Technology Center IBM Corp., Austin, Tx (512) 838-9253 T/L: 678-9253 ryanh@us.ibm.com diffstat output: tools/python/xen/lowlevel/xc/xc.c | 3 ++- tools/python/xen/xend/XendNode.py | 4 ---- tools/xenmon/xenbaked.c | 5 +---- tools/xenstat/libxenstat/src/xenstat.c | 4 +--- tools/xentrace/xentrace.c | 5 +---- xen/arch/ia64/xen/dom0_ops.c | 1 + xen/arch/x86/dom0_ops.c | 2 +- xen/include/public/dom0_ops.h | 1 + 8 files chang...

Hi, This patch removes the magic number "31" for readability. The number "31" means the idle domain ID. In detail: - display the idle domain ID with "Idle" instead of "31" - write to the file "log-idle.log" instead of "log-dom31.log". Signed-off-by: KUWAMURA Shin''ya <kuwa@jp.fujitsu.com> Thanks, -- KUWAMURA

...Performance Monitor ----------------------- The xenmon tools make use of the existing xen tracing feature to provide fine grained reporting of various domain related metrics. It should be stressed that the xenmon.py script included here is just an example of the data that may be displayed. The xenbake demon keeps a large amount of history in a shared memory area that may be accessed by tools such as xenmon. For each domain, xenmon reports various metrics. One part of the display is a group of metrics that have been accumulated over the last second, while another part of the display shows da...

...levon@sun.com # Date 1155596263 -3600 # Node ID dc12f0942649ee27ff2aec3e3d9c2d99746b9e58 # Parent 09bc238664cb7b6d0f960f5e135ac80a75b342f1 Remove another external-to-libxc user of xc_dom0_op(). Signed-off-by: John Levon <john.levon@sun.com> diff -r 09bc238664cb -r dc12f0942649 tools/xenmon/xenbaked.c --- a/tools/xenmon/xenbaked.c Mon Aug 14 15:40:36 2006 +0100 +++ b/tools/xenmon/xenbaked.c Mon Aug 14 23:57:43 2006 +0100 @@ -444,14 +444,11 @@ struct t_rec **init_rec_ptrs(struct t_bu */ unsigned int get_num_cpus(void) { - dom0_op_t op; + xc_physinfo_t physinfo; int xc_handle =...

Hi, All! This is a patch which needs discussion. Currently xc_tbuf_enable assumed tb_init_done = 0. But Sometimes already on For example(xenmon.py(xenbaked) and xentrace). These two programs assues tb_init_done =0 at start time. Currently xenbaked care the problem by setting tb_init_done=0 at exit time. But xentrace does not care the problem. Then error occured!(Cannot see the trace buffer.) I added a code in xc_tbuf_enable to permit tb_init_done=...

Testing on an 8-node 128-way NUMA machine has exposed a problem with Xen''s nr_cpus calculation. In this case, since Xen cuts off recognized CPUs at 32, the machine appears to have 16 CPUs on the first and second nodes and none on the remaining nodes. Given this asymmetry, the calculation of sockets_per_node (which is later used to calculate nr_cpus) is incorrect:

...same values previously set Bug #745419 [src:xen] xen-utils-4.1: Pygrub fails to boot from LVM LV when something installed in the volume boot record Marked as found in versions xen/4.1.4-3+deb7u1. > reassign 716496 src:xen 4.1.4-4 Bug #716496 [xen-utils-4.1] [Mayhem] Bug report on xen-utils-4.1: xenbaked crashes with exit status 139 Bug #716497 [xen-utils-4.1] [Mayhem] Bug report on xen-utils-4.1: xenctx crashes with exit status 139 Bug #716498 [xen-utils-4.1] [Mayhem] Bug report on xen-utils-4.1: xentrace_setmask crashes with exit status 139 Bug #716499 [xen-utils-4.1] [Mayhem] Bug report on xen...

...+++ tools/libxc/xc_misc.c | 4 + tools/libxc/xenctrl.h | 3 tools/python/xen/lowlevel/xc/xc.c | 77 ++++++++++++++++---- tools/python/xen/xend/XendNode.py | 67 +++++++++++++++++ tools/xenmon/xenbaked.c | 3 tools/xenstat/libxenstat/src/xenstat.c | 3 tools/xentrace/xentrace.c | 3 tools/xm-test/tests/info/02_info_compiledata_pos.py | 4 - xen/arch/x86/sysctl.c | 51 ++++++++++++-...

Processing commands for control at bugs.debian.org: > close 716496 Bug #716496 [src:xen] [Mayhem] Bug report on xen-utils-4.1: xenbaked crashes with exit status 139 Bug #716497 [src:xen] [Mayhem] Bug report on xen-utils-4.1: xenctx crashes with exit status 139 Bug #716498 [src:xen] [Mayhem] Bug report on xen-utils-4.1: xentrace_setmask crashes with exit status 139 Bug #716499 [src:xen] [Mayhem] Bug report on xen-utils-4.1: xentra...

Processing commands for control at bugs.debian.org: > # Automatically generated email from bts, devscripts version 2.10.12 > fixed 447795 3.0.3-0-4 Bug#447795: xen-utils-3.0.3-1: [CVE-2007-3919] xenmon.py / xenbaked insecure file accesss Bug marked as fixed in version 3.0.3-0-4. > End of message, stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database)

...trol(). The function checks the trace buffer is initialized or not in line 183. If not, this routine stops working. Of course, this problem is also solved by using tbctl [0|1]. But this problem is already solved by xenmon.py without using tbctl command. This code is just moved from tools/xenmon/xenbaked.c(get_tbuf and misc settings) I hope these two tools (xenmon.py and xentrace) share the functions. Signed-off-by: Atsushi SAKAI <sakaia@jp.fujitsu.com> Thanks, A.Sakai _______________________________________________ Xen-devel mailing list Xen-devel@lists.xensource.com http:/...

...wrapper used by the xen Debian packages seems to be only a link to the wrapper is missing the program exists in the package xen-utils-3.0.3-0-2 and the follwoing make it work: ln -s ../lib/xen-common/bin/xen-utils-wrapper /usr/sbin/xenmon.py ln -s ../lib/xen-common/bin/xen-utils-wrapper /usr/sbin/xenbaked This program is expected to be in the search path and used by people who want to monitor some data of a Dom0 server. Henning

Processing commands for control at bugs.debian.org: > # Automatically generated email from bts, devscripts version 2.9.26 > reassign 447795 xen-3.0 3.0.3-0-3 Bug#447795: xen-utils-3.0.3-1: [CVE-2007-3919] xenmon.py / xenbaked insecure file accesss Bug reassigned from package `xen-utils-3.0.3-1' to `xen-3.0'. > End of message, stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database)

Processing commands for control at bugs.debian.org: > # Automatically generated email from bts, devscripts version 2.9.26 > found 447795 3.0.3-0-1 Bug#447795: xen-utils-3.0.3-1: [CVE-2007-3919] xenmon.py / xenbaked insecure file accesss Bug marked as found in version 3.0.3-0-1. > End of message, stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database)

Source: xen-unstable Version: 3.0-unstable+hg11561-1 Severity: grave Tags: security Hi, the following CVE (Common Vulnerabilities & Exposures) id was published for xen-unstable. CVE-2007-3919[0]: | (1) xenbaked and (2) xenmon.py in Xen 3.1 and earlier allow local | users to truncate arbitrary files via a symlink attack on | /tmp/xenq-shm. If you fix this vulnerability please also include the CVE id in your changelog entry. For further information: [0] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-...

Hi, I read about RPC interface for xenmon in this presentation: www.xensource.com/files/xs0106_xenmon_brief.pdf Has such interface been implemented yet by anyone? Thanks, -- Jayesh ------------------------------------------------------------------------ Everything you can imagine is real _______________________________________________ Xen-devel mailing list Xen-devel@lists.xensource.com