search for: lguest_guest_top

...t distros only provides shared library form of zlib in their default installation. > And shared linking also provides litte tiny security for hypotetical security problems will be introduced by zlib :). Unfortunately, this introduces a security hole. See, the guest can access all memory up to LGUEST_GUEST_TOP, or 0xB8000000 on my machine. Without -static, we look like this: > cat /proc/4137/maps b7e0b000-b7e0d000 rw-p b7e0b000 00:00 0 b7e0d000-b7f35000 r-xp 00000000 03:03 17069 /lib/tls/libc-2.3.6.so b7f35000-b7f3a000 r--p 00127000 03:03 17069 /lib/tls/libc-2.3.6.so b7f3a000-b7f3c000 rw...

...t distros only provides shared library form of zlib in their default installation. > And shared linking also provides litte tiny security for hypotetical security problems will be introduced by zlib :). Unfortunately, this introduces a security hole. See, the guest can access all memory up to LGUEST_GUEST_TOP, or 0xB8000000 on my machine. Without -static, we look like this: > cat /proc/4137/maps b7e0b000-b7e0d000 rw-p b7e0b000 00:00 0 b7e0d000-b7f35000 r-xp 00000000 03:03 17069 /lib/tls/libc-2.3.6.so b7f35000-b7f3a000 r--p 00127000 03:03 17069 /lib/tls/libc-2.3.6.so b7f3a000-b7f3c000 rw...

...:56.000000000 -0300 @@ -1,12 +1,13 @@ # This creates the demonstration utility "lguest" which runs a Linux guest. -# We rely on CONFIG_PAGE_OFFSET to know where to put lguest binary. -# Some shells (dash - ubunu) can't handle numbers that big so we cheat. -include ../../../.config -LGUEST_GUEST_TOP := ($(CONFIG_PAGE_OFFSET) - 0x08000000) -CFLAGS:=-Wall -Wmissing-declarations -Wmissing-prototypes -O3 \ - -static -DLGUEST_GUEST_TOP="$(LGUEST_GUEST_TOP)" -Wl,-T,lguest.lds +#we could uname -i, but it seems to return unknown on a bunch locations +ARCH:=$(shell uname -m | sed s/i[3456]8...

...:56.000000000 -0300 @@ -1,12 +1,13 @@ # This creates the demonstration utility "lguest" which runs a Linux guest. -# We rely on CONFIG_PAGE_OFFSET to know where to put lguest binary. -# Some shells (dash - ubunu) can't handle numbers that big so we cheat. -include ../../../.config -LGUEST_GUEST_TOP := ($(CONFIG_PAGE_OFFSET) - 0x08000000) -CFLAGS:=-Wall -Wmissing-declarations -Wmissing-prototypes -O3 \ - -static -DLGUEST_GUEST_TOP="$(LGUEST_GUEST_TOP)" -Wl,-T,lguest.lds +#we could uname -i, but it seems to return unknown on a bunch locations +ARCH:=$(shell uname -m | sed s/i[3456]8...

This is a new version of the unified lguest launcher that applies to the current tree. According to rusty's suggestion, I'm bothering less to be able to load 32 bit kernels on 64-bit machines: changing the launcher for such case would be the easy part! In the absence of further objections, I'll commit it. Signed-off-by: Glauber de Oliveira Costa <gcosta@redhat.com> -- =

This is a new version of the unified lguest launcher that applies to the current tree. According to rusty's suggestion, I'm bothering less to be able to load 32 bit kernels on 64-bit machines: changing the launcher for such case would be the easy part! In the absence of further objections, I'll commit it. Signed-off-by: Glauber de Oliveira Costa <gcosta@redhat.com> -- =

...ot; -------------- next part -------------- --- /dev/null 2007-04-02 15:35:49.510433377 -0300 +++ i386/lguest_defs.h 2007-04-02 16:19:27.000000000 -0300 @@ -0,0 +1,7 @@ +#ifndef _LGUEST_DEFS_H_ +#define _LGUEST_DEFS_H_ + +/* LGUEST_TOP_ADDRESS comes from the Makefile */ +#define RESERVE_TOP_ADDRESS LGUEST_GUEST_TOP - 1024*1024 + +#endif --- /dev/null 2007-04-02 15:35:49.510433377 -0300 +++ x86_64/lguest_defs.h 2007-04-02 16:19:27.000000000 -0300 @@ -0,0 +1,11 @@ +#ifndef _LGUEST_DEFS_H_ +#define _LGUEST_DEFS_H_ + +#include <asm/vsyscall.h> + +/* LGUEST_TOP_ADDRESS comes from the Makefile */ +#define RES...

...ot; -------------- next part -------------- --- /dev/null 2007-04-02 15:35:49.510433377 -0300 +++ i386/lguest_defs.h 2007-04-02 16:19:27.000000000 -0300 @@ -0,0 +1,7 @@ +#ifndef _LGUEST_DEFS_H_ +#define _LGUEST_DEFS_H_ + +/* LGUEST_TOP_ADDRESS comes from the Makefile */ +#define RESERVE_TOP_ADDRESS LGUEST_GUEST_TOP - 1024*1024 + +#endif --- /dev/null 2007-04-02 15:35:49.510433377 -0300 +++ x86_64/lguest_defs.h 2007-04-02 16:19:27.000000000 -0300 @@ -0,0 +1,11 @@ +#ifndef _LGUEST_DEFS_H_ +#define _LGUEST_DEFS_H_ + +#include <asm/vsyscall.h> + +/* LGUEST_TOP_ADDRESS comes from the Makefile */ +#define RES...

...lguest/i386/Makefile @@ -0,0 +1,21 @@ +# This creates the demonstration utility "lguest" which runs a Linux guest. + +# We rely on CONFIG_PAGE_OFFSET to know where to put lguest binary. +# Some shells (dash - ubunu) can't handle numbers that big so we cheat. +include ../../../.config +LGUEST_GUEST_TOP := ($(CONFIG_PAGE_OFFSET) - 0x08000000) + +CFLAGS:=-Wall -Wmissing-declarations -Wmissing-prototypes -O3 \ + -static -DLGUEST_GUEST_TOP="$(LGUEST_GUEST_TOP)" -Wl,-T,lguest.lds +LDLIBS:=-lz + +all: lguest.lds lguest + +# The linker script on x86 is so complex the only way of creating one +...

...lguest/i386/Makefile @@ -0,0 +1,21 @@ +# This creates the demonstration utility "lguest" which runs a Linux guest. + +# We rely on CONFIG_PAGE_OFFSET to know where to put lguest binary. +# Some shells (dash - ubunu) can't handle numbers that big so we cheat. +include ../../../.config +LGUEST_GUEST_TOP := ($(CONFIG_PAGE_OFFSET) - 0x08000000) + +CFLAGS:=-Wall -Wmissing-declarations -Wmissing-prototypes -O3 \ + -static -DLGUEST_GUEST_TOP="$(LGUEST_GUEST_TOP)" -Wl,-T,lguest.lds +LDLIBS:=-lz + +all: lguest.lds lguest + +# The linker script on x86 is so complex the only way of creating one +...

...ple that have a separate object dir, look there for .config +KBUILD_OUTPUT := ../.. +ifdef O + ifeq ("$(origin O)", "command line") + KBUILD_OUTPUT := $(O) + endif +endif +# We rely on CONFIG_PAGE_OFFSET to know where to put lguest binary. +include $(KBUILD_OUTPUT)/.config +LGUEST_GUEST_TOP := ($(CONFIG_PAGE_OFFSET) - 0x08000000) + +CFLAGS:=-Wall -Wmissing-declarations -Wmissing-prototypes -O3 \ + -static -DLGUEST_GUEST_TOP="$(LGUEST_GUEST_TOP)" -Wl,-T,lguest.lds +LDLIBS:=-lz + +all: lguest.lds lguest + +# The linker script on x86 is so complex the only way of creating one +...

...ple that have a separate object dir, look there for .config +KBUILD_OUTPUT := ../.. +ifdef O + ifeq ("$(origin O)", "command line") + KBUILD_OUTPUT := $(O) + endif +endif +# We rely on CONFIG_PAGE_OFFSET to know where to put lguest binary. +include $(KBUILD_OUTPUT)/.config +LGUEST_GUEST_TOP := ($(CONFIG_PAGE_OFFSET) - 0x08000000) + +CFLAGS:=-Wall -Wmissing-declarations -Wmissing-prototypes -O3 \ + -static -DLGUEST_GUEST_TOP="$(LGUEST_GUEST_TOP)" -Wl,-T,lguest.lds +LDLIBS:=-lz + +all: lguest.lds lguest + +# The linker script on x86 is so complex the only way of creating one +...

...e object dir, look there for .config +KBUILD_OUTPUT := ../.. +ifdef O + ifeq ("$(origin O)", "command line") + KBUILD_OUTPUT := $(O) + endif +endif # We rely on CONFIG_PAGE_OFFSET to know where to put lguest binary. -include ../../.config +include $(KBUILD_OUTPUT)/.config LGUEST_GUEST_TOP := ($(CONFIG_PAGE_OFFSET) - 0x08000000) CFLAGS:=-Wall -Wmissing-declarations -Wmissing-prototypes -O3 \ =================================================================== --- a/Documentation/lguest/lguest.c +++ b/Documentation/lguest/lguest.c @@ -40,6 +40,9 @@ typedef uint8_t u8; #define PAGE_...

...e object dir, look there for .config +KBUILD_OUTPUT := ../.. +ifdef O + ifeq ("$(origin O)", "command line") + KBUILD_OUTPUT := $(O) + endif +endif # We rely on CONFIG_PAGE_OFFSET to know where to put lguest binary. -include ../../.config +include $(KBUILD_OUTPUT)/.config LGUEST_GUEST_TOP := ($(CONFIG_PAGE_OFFSET) - 0x08000000) CFLAGS:=-Wall -Wmissing-declarations -Wmissing-prototypes -O3 \ =================================================================== --- a/Documentation/lguest/lguest.c +++ b/Documentation/lguest/lguest.c @@ -40,6 +40,9 @@ typedef uint8_t u8; #define PAGE_...

...*me); + unsigned long (*handle_output)(int fd, const struct iovec *iov, + unsigned int num, struct device *me); /* Device-specific data. */ void *priv; @@ -78,7 +89,7 @@ static int zero_fd; FIXME: vdso gets mapped just under it, and we need to protect that. */ #define RESERVE_TOP LGUEST_GUEST_TOP - 1024*1024 -static u32 memparse(const char *ptr) +static unsigned long memparse(const char *ptr) { char *end; unsigned long ret = strtoul(ptr, &end, 0); @@ -142,8 +153,8 @@ static void map_memory(unsigned long mem err(1, "Mmaping /dev/zero for %li bytes", mem); } -static...

...*me); + unsigned long (*handle_output)(int fd, const struct iovec *iov, + unsigned int num, struct device *me); /* Device-specific data. */ void *priv; @@ -78,7 +89,7 @@ static int zero_fd; FIXME: vdso gets mapped just under it, and we need to protect that. */ #define RESERVE_TOP LGUEST_GUEST_TOP - 1024*1024 -static u32 memparse(const char *ptr) +static unsigned long memparse(const char *ptr) { char *end; unsigned long ret = strtoul(ptr, &end, 0); @@ -142,8 +153,8 @@ static void map_memory(unsigned long mem err(1, "Mmaping /dev/zero for %li bytes", mem); } -static...

Hi all, These are the patches I'm planning to submit for 2.6.24. Comments gratefully accepted. Along with the usual cleanups and improvements are Jes' de-i386-ification patches, and a new "virtio" mechanism designed to be shared with KVM (and hopefully other hypervisors). Cheers, Rusty. Documentation/lguest/Makefile | 30 Documentation/lguest/lguest.c

Hi all, These are the patches I'm planning to submit for 2.6.24. Comments gratefully accepted. Along with the usual cleanups and improvements are Jes' de-i386-ification patches, and a new "virtio" mechanism designed to be shared with KVM (and hopefully other hypervisors). Cheers, Rusty. Documentation/lguest/Makefile | 30 Documentation/lguest/lguest.c