Displaying 20 results from an estimated 25 matches for "xenbaked".
2007 Oct 23
0
Bug#447795: xen-utils-3.0.3-1: [CVE-2007-3919] xenmon.py / xenbaked insecure file accesss
...ls-3.0.3-1
Version: 3.0.3-0-3
Severity: grave
Tags: security
Justification: user security hole
Xen versions 3.x, and 3.1 contain a tool for processing Xen trace
buffer information.
This tool uses the static file /tmp/xenq-shm insecurely allowing
a local user to truncate any local file when xenbaked or xenmon.py
are invoked by root.
Sample session:
# setup.
skx at vain:~$ ln -s /etc/passwd /tmp/xenq-shm
# later.
skx at vain:~$ sudo xenbaked
# all gone. :(
skx at vain:~$ ls -l /etc/passwd
-rw-r--r-- 1 0 root 327680 2007-10-17 00:14 /etc/passwd
This flaw is...
2013 Jul 10
0
Bug#716496: [Mayhem] Bug report on xen-utils-4.1: xenbaked crashes with exit status 139
Package: xen-utils-4.1
Version: 4.1.4-4
Severity: normal
User: mayhem at forallsecure.com
Usertags: mayhem
xenbaked crashes with exit status 139. We confirmed the crash by
re-running it in a fresh debian unstable installation.
The attachment [1] contains a testcase (under ./crash) crashing the
program. It ensures that you can easily reproduce the bug. Additionally,
under ./crash_info/, we include more informati...
2013 Jun 26
0
Bug report on xen-utils-4.1: xenbaked crashes with exit status 139
Hi,
We found a crash in xenbaked contained in the xen-utils-4.1 package. You are being
contacted because your are listed as one of the maintainer of xen-utils-4.1.
We are planning to submit the bug to the Debian bug tracking system in two
weeks. We wanted to give you a heads-up, so that you some time to assess the
seriousness of...
2008 Apr 24
0
[PATCH] xenbaked: Fix access to trace buffer after xentrace changes
Hi,
Xenmon does not work correctlly after xentrace changes in cs 17000.
Attached patch fixes this problem.
This patch modifies access to trace buffer same as tools/xentrace.
Signed-off-by: Naoki Nishiguchi <nisiguti@jp.fujitsu.com>
Regards,
Naoki Nishiguchi
_______________________________________________
Xen-devel mailing list
Xen-devel@lists.xensource.com
2006 Jul 31
1
[PATCH 5/6] xen, tools: calculate nr_cpus via num_online_cpus
...testing with this patch applied.
--
Ryan Harper
Software Engineer; Linux Technology Center
IBM Corp., Austin, Tx
(512) 838-9253 T/L: 678-9253
ryanh@us.ibm.com
diffstat output:
tools/python/xen/lowlevel/xc/xc.c | 3 ++-
tools/python/xen/xend/XendNode.py | 4 ----
tools/xenmon/xenbaked.c | 5 +----
tools/xenstat/libxenstat/src/xenstat.c | 4 +---
tools/xentrace/xentrace.c | 5 +----
xen/arch/ia64/xen/dom0_ops.c | 1 +
xen/arch/x86/dom0_ops.c | 2 +-
xen/include/public/dom0_ops.h | 1 +
8 files changed...
2006 Jul 04
4
[PATCH] xenmon: remove magic number "31" (the idle domain)
Hi,
This patch removes the magic number "31" for readability. The number
"31" means the idle domain ID.
In detail:
- display the idle domain ID with "Idle" instead of "31"
- write to the file "log-idle.log" instead of "log-dom31.log".
Signed-off-by: KUWAMURA Shin''ya <kuwa@jp.fujitsu.com>
Thanks,
--
KUWAMURA
2005 Oct 20
0
XenMon Patch
...erval
o Average number of page exchanges per execution of the domain
Usage Notes and issues
----------------------
- Start xenmon by simply running xenmon.py; The xenbake demon is
started and
stopped automatically by xenmon.
- To see the various options for xenmon, run xenmon -h. Ditto for xenbaked.
- xenmon also has an option (-n) to output log data to a file instead
of the
curses interface.
- NDOMAINS is defined to be 32, but can be changed by recompiling xenbaked
- Xenmon.py appears to create 1-2% cpu overhead; Part of this is just the
overhead of the python interpreter. Part of...
2006 Aug 14
0
[PATCH] remove another xc_dom0_op() user
...levon@sun.com
# Date 1155596263 -3600
# Node ID dc12f0942649ee27ff2aec3e3d9c2d99746b9e58
# Parent 09bc238664cb7b6d0f960f5e135ac80a75b342f1
Remove another external-to-libxc user of xc_dom0_op().
Signed-off-by: John Levon <john.levon@sun.com>
diff -r 09bc238664cb -r dc12f0942649 tools/xenmon/xenbaked.c
--- a/tools/xenmon/xenbaked.c Mon Aug 14 15:40:36 2006 +0100
+++ b/tools/xenmon/xenbaked.c Mon Aug 14 23:57:43 2006 +0100
@@ -444,14 +444,11 @@ struct t_rec **init_rec_ptrs(struct t_bu
*/
unsigned int get_num_cpus(void)
{
- dom0_op_t op;
+ xc_physinfo_t physinfo;
int xc_handle = xc...
2006 May 24
0
[PATCH] Fix xc_tbuf_enable assumption.
Hi, All!
This is a patch which needs discussion.
Currently xc_tbuf_enable assumed tb_init_done = 0.
But Sometimes already on
For example(xenmon.py(xenbaked) and xentrace).
These two programs assues tb_init_done =0 at start time.
Currently xenbaked care the problem by setting tb_init_done=0 at exit time.
But xentrace does not care the problem.
Then error occured!(Cannot see the trace buffer.)
I added a code in xc_tbuf_enable to permit tb_init_done=1....
2007 Oct 19
4
[PATCH] nr_cpus calculation problem due to incorrect sockets_per_node
Testing on an 8-node 128-way NUMA machine has exposed a problem with
Xen''s nr_cpus calculation. In this case, since Xen cuts off recognized
CPUs at 32, the machine appears to have 16 CPUs on the first and second
nodes and none on the remaining nodes. Given this asymmetry, the
calculation of sockets_per_node (which is later used to calculate
nr_cpus) is incorrect:
2014 Nov 24
0
Processed: reassign 745419 to src:xen, reassign 716496 to src:xen
...same values previously set
Bug #745419 [src:xen] xen-utils-4.1: Pygrub fails to boot from LVM LV when something installed in the volume boot record
Marked as found in versions xen/4.1.4-3+deb7u1.
> reassign 716496 src:xen 4.1.4-4
Bug #716496 [xen-utils-4.1] [Mayhem] Bug report on xen-utils-4.1: xenbaked crashes with exit status 139
Bug #716497 [xen-utils-4.1] [Mayhem] Bug report on xen-utils-4.1: xenctx crashes with exit status 139
Bug #716498 [xen-utils-4.1] [Mayhem] Bug report on xen-utils-4.1: xentrace_setmask crashes with exit status 139
Bug #716499 [xen-utils-4.1] [Mayhem] Bug report on xen-u...
2006 Sep 29
4
[PATCH 4/6] xen: export NUMA topology in physinfo hcall
...+++
tools/libxc/xc_misc.c | 4 +
tools/libxc/xenctrl.h | 3
tools/python/xen/lowlevel/xc/xc.c | 77 ++++++++++++++++----
tools/python/xen/xend/XendNode.py | 67 +++++++++++++++++
tools/xenmon/xenbaked.c | 3
tools/xenstat/libxenstat/src/xenstat.c | 3
tools/xentrace/xentrace.c | 3
tools/xm-test/tests/info/02_info_compiledata_pos.py | 4 -
xen/arch/x86/sysctl.c | 51 ++++++++++++-
xe...
2015 Nov 05
0
Processed: closing 716496
Processing commands for control at bugs.debian.org:
> close 716496
Bug #716496 [src:xen] [Mayhem] Bug report on xen-utils-4.1: xenbaked crashes with exit status 139
Bug #716497 [src:xen] [Mayhem] Bug report on xen-utils-4.1: xenctx crashes with exit status 139
Bug #716498 [src:xen] [Mayhem] Bug report on xen-utils-4.1: xentrace_setmask crashes with exit status 139
Bug #716499 [src:xen] [Mayhem] Bug report on xen-utils-4.1: xentrace...
2008 Jan 24
0
Processed: fixed 447795 in 3.0.3-0-4
Processing commands for control at bugs.debian.org:
> # Automatically generated email from bts, devscripts version 2.10.12
> fixed 447795 3.0.3-0-4
Bug#447795: xen-utils-3.0.3-1: [CVE-2007-3919] xenmon.py / xenbaked insecure file accesss
Bug marked as fixed in version 3.0.3-0-4.
>
End of message, stopping processing here.
Please contact me if you need assistance.
Debian bug tracking system administrator
(administrator, Debian Bugs database)
2006 May 12
0
[PATCH]fix xentrace
...trol().
The function checks the trace buffer is initialized or not
in line 183.
If not, this routine stops working.
Of course, this problem is also solved by using tbctl [0|1].
But this problem is already solved by xenmon.py without using tbctl command.
This code is just moved from
tools/xenmon/xenbaked.c(get_tbuf and misc settings)
I hope these two tools (xenmon.py and xentrace) share the functions.
Signed-off-by: Atsushi SAKAI <sakaia@jp.fujitsu.com>
Thanks,
A.Sakai
_______________________________________________
Xen-devel mailing list
Xen-devel@lists.xensource.com
http://l...
2007 Jan 14
1
Bug#406863: xenmon.py isn't in the execution search path
...wrapper used by the xen Debian packages seems to be only a link
to the wrapper is missing the program exists in the package
xen-utils-3.0.3-0-2 and the follwoing make it work:
ln -s ../lib/xen-common/bin/xen-utils-wrapper /usr/sbin/xenmon.py
ln -s ../lib/xen-common/bin/xen-utils-wrapper /usr/sbin/xenbaked
This program is expected to be in the search path and used by people
who want to monitor some data of a Dom0 server.
Henning
2007 Oct 23
0
Processed: reassign 447795 to xen-3.0
Processing commands for control at bugs.debian.org:
> # Automatically generated email from bts, devscripts version 2.9.26
> reassign 447795 xen-3.0 3.0.3-0-3
Bug#447795: xen-utils-3.0.3-1: [CVE-2007-3919] xenmon.py / xenbaked insecure file accesss
Bug reassigned from package `xen-utils-3.0.3-1' to `xen-3.0'.
>
End of message, stopping processing here.
Please contact me if you need assistance.
Debian bug tracking system administrator
(administrator, Debian Bugs database)
2007 Oct 23
0
Processed: found 447795 in 3.0.3-0-1
Processing commands for control at bugs.debian.org:
> # Automatically generated email from bts, devscripts version 2.9.26
> found 447795 3.0.3-0-1
Bug#447795: xen-utils-3.0.3-1: [CVE-2007-3919] xenmon.py / xenbaked insecure file accesss
Bug marked as found in version 3.0.3-0-1.
>
End of message, stopping processing here.
Please contact me if you need assistance.
Debian bug tracking system administrator
(administrator, Debian Bugs database)
2008 Feb 04
1
Bug#464044: xen-unstable: CVE-2007-3919 prone to symlink attack
Source: xen-unstable
Version: 3.0-unstable+hg11561-1
Severity: grave
Tags: security
Hi,
the following CVE (Common Vulnerabilities & Exposures) id was
published for xen-unstable.
CVE-2007-3919[0]:
| (1) xenbaked and (2) xenmon.py in Xen 3.1 and earlier allow local
| users to truncate arbitrary files via a symlink attack on
| /tmp/xenq-shm.
If you fix this vulnerability please also include the CVE id
in your changelog entry.
For further information:
[0] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-20...
2006 Apr 02
3
RPC interface for xenmon
Hi,
I read about RPC interface for xenmon in this presentation:
www.xensource.com/files/xs0106_xenmon_brief.pdf
Has such interface been implemented yet by anyone?
Thanks,
--
Jayesh
------------------------------------------------------------------------
Everything you can imagine is real
_______________________________________________
Xen-devel mailing list
Xen-devel@lists.xensource.com