similar to: [PATCH] [xend] [ACM] Enable labeling of resources as inaccessible

This patch: * adds a C-based security policy translation tool to Xen (secpol_xml2bin) and removes the current Java security policy translator (Java dependencies). The C-based tool integrates into the Xen source tree build and install (using gnome libxml2 for XML parsing). See install.txt. * introduces security labels and related tools. Users can now use semantic-rich label names to put

Close the filedescriptor after reading the log file. Signed-off-by: Stefan Berger <stefanb@us.ibm.com> _______________________________________________ Xen-devel mailing list Xen-devel@lists.xensource.com http://lists.xensource.com/xen-devel

This patch rewrites the rtc/timeoffset entry so the VM''s record can be retrieved with the Java xmlrpc library. If the entry is ''None'' it upsets the xmlrpc parser. This fixes it, though maybe there''s a better place in xend to place similar code. Signed-off-by: Stefan Berger <stefanb@us.ibm.com> _______________________________________________ Xen-devel

Same functionality as the previous patches in this series. I have updated the error handling to correct the problems discovered by Ewan. This patch successfully completes the xm-test suite on my dev machine. In addition, we have tested out the affected commands by hand to ensure that error handling is being done properly. Hopefully this one will not create any more problems.

This fixes the xapi test case 02 with those parts that currently do not work disabled with ''if 0:'' Signed-off-by: Stefan Berger <stefanb@us.ibm.com> Index: root/xen-unstable.hg/tools/xm-test/tests/xapi/02_xapi-vbd_basic.py =================================================================== --- root.orig/xen-unstable.hg/tools/xm-test/tests/xapi/02_xapi-vbd_basic.py +++

Signed-off-by: Stefan Berger <stefanb@us.ibm.com> diff -r 3ef0510e44d0 tools/python/xen/xend/XendAPI.py --- a/tools/python/xen/xend/XendAPI.py Tue May 08 10:21:23 2007 +0100 +++ b/tools/python/xen/xend/XendAPI.py Mon May 14 23:17:32 2007 -0400 @@ -905,7 +941,7 @@ class XendAPI(object): XendNode.instance().set_name(new_name) return

This enables the usage of a bootloader, i.e., pygrub, when starting a domain using xm in Xen-API mode. Signed-off-by: Stefan Berger <stefanb@us.ibm.com> _______________________________________________ Xen-devel mailing list Xen-devel@lists.xensource.com http://lists.xensource.com/xen-devel

The latest change to ACM makes it fail to compile. This patch fixes the problem. Signed-off-by: Nguyen Anh Quynh <aquynh@gmail.com> $ diffstat acm.patch acm/acm_core.c | 61 --------------------- include/acm/acm_hooks.h | 135 ++++++++++++++++++++++++++++++++++-------------- 2 files changed, 96 insertions(+), 100 deletions(-) _______________________________________________

This patch adds a TPM device model to the qemu dm for fully virtualized VMs. It is enabled in the VM only if the user requests a TPM device in the vm configuration file using the ''vtpm=[...]'' line. It enables the qemu device model command line with a ''vtpm_instance <instance number>'' parameter. Signed-off-by: David Safford <safford@watson.ibm.com>

This patch adds TCG BIOS extensions to the high memory area along with some often-used libc utility functions. The TCG extensions are described here: https://www.trustedcomputinggroup.org/specs/PCClient/TCG_PCClientImplementationforBIOS_1-20_1-00.pdf I have tried to keep the patching with rombios.c to a minimum, but some amount of code needs to be inserted at various locations. The code is

More details : I noticed that every start of xend is adding the POSTROUTING masquerade iptables rule, and nothing is done at stop time. This should bi fixed, at least. -- Olivier BERGER <olivier.berger at int-edu.eu> (ATTENTION : new address) Ing?nieur Recherche - Dept INF GET/INT at Evry (http://www.int-edu.eu/) OpenPGP-Id: 1024D/6B829EEC

The following test case does local migration 3 times in a loop. I currently see the following error output on x86-64 (only!) inside the guest (change debugMe in line 68 of xm-test/lib/XmTestLib/Console.py to True): @%@%> XENBUS error -12 while reading message XENBUS error -12 while reading message XENBUS unexpected type [1325400064], expected [4] XENBUS error -12 while reading message XENBUS

This patch fixes Linux 2.6.18 compilation on x86-64 and also works on i386. Signed-off-by: Stefan Berger <stefanb@us.ibm.com> _______________________________________________ Xen-devel mailing list Xen-devel@lists.xensource.com http://lists.xensource.com/xen-devel

This patch adds an implementation of the TCG BIOS extensions to the Bochs BIOS and enables logging of boot measurements using the previously implemented support for TCPA ACPI tables. A low-level driver for a TPM TIS device and an Atmel device is provided. The implemented specification is described here:

Transmit the locality in which the command was sent in the highest 3 bits of the 4 bytes prepended to each packet. Signed-off-by: Stefan Berger <stefanb@us.ibm.com> _______________________________________________ Xen-devel mailing list Xen-devel@lists.xensource.com http://lists.xensource.com/xen-devel

The attached patch - fixes a problem in the vTPM backend where the timer was killed when the timer function was run - removes a variable from being put in the ring by the frontend - reformatting due to indent tool running over some of the files Has been tested with the vtpm-relevant parts of xm-test. Signed-off-by: Stefan Berger <stefanb@us.ibm.com>

I am removing the experimental feature that allows buffer sizes for transfers from TPMs larger than 2kb. This could become useful if a vTPM is located in its owns domain and needs to be serialized for suspension or migration and the packet size becomes bigger than the current limit. Partial reads were supposed to complement this feature for applications to know how many bytes to read from

Following the ACPI spec. I improved the way the RSDP is found in the BIOS extension so that it will still be found if it ever moves. Also makes the code look better. Signed-off-by: Stefan Berger <stefanb@us.ibm.com> _______________________________________________ Xen-devel mailing list Xen-devel@lists.xensource.com http://lists.xensource.com/xen-devel

This patch adds a TIS device model compliant to the 1.2 TPM specification to Qemu. It implements all registers necessary to make the Linux TIS driver work (tpm_tis.c). All of the basic registers supported by this type of device are implemented. Also the locality selection has been implemented, but has not been tested. The legacy registers as described in the specification are not supported.

This adds two more permissions to the default Flask policy to get a VM with a network interface to work. Signed-off-by: Stefan Berger <stefanb@us.ibm.com> _______________________________________________ Xen-devel mailing list Xen-devel@lists.xensource.com http://lists.xensource.com/xen-devel