bugGNU GRUB - Bugs: bug #43420, 20_linux_xen doesn't support Xen...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #43420: 20_linux_xen doesn't support Xen XSM policy file

Submitted by:  Wei Liu <liuw>
Submitted on:  Tue 14 Oct 2014 09:15:10 PM UTC  
 
Category: ConfigurationSeverity: Major
Priority: 5 - NormalItem Group: Feature Request
Status: NonePrivacy: Public
Assigned to: NoneOriginator Name: 
Open/Closed: OpenRelease: 
Release: Git masterReproducibility: Every Time
Planned Release: 2.03+

Wed 02 Mar 2016 02:42:51 PM UTC, comment #3:

Hello, I received an email saying that this is going to be in 2.02 release.

If that's referring to merging this patch for 2.02, could you please hold it off until I confirm this is the agreed upon way of adding XSM modules?

The approach might have changed. I need some time to check.

Sorry for not having updated this bug report earlier!

Wei Liu <liuw>
Fri 08 May 2015 06:42:13 AM UTC, comment #2:

Yes, I will bring this to the list at some point. I want to iron out rough edges in XSM first.

The wiki is a out of date now -- there have been changes to XSM recently, that's why we have a updated patch. I will fix it during our documentation day (which is held every month).

Thanks.

Wei Liu <liuw>
Wed 06 May 2015 05:33:12 PM UTC, comment #1:

Such patches are better discussed on list for wider exposure.

Your second patch does not match wiki.

I do not think we want to always generate two menu entries. What is wrong with unconditionally loading XSM if present and letting user to enable/disable it in GRUB_CMDLINE_XEN as needed?

Andrei Borzenkov <arvidjaar>
Project Member
Tue 14 Oct 2014 09:15:10 PM UTC, original submission:

Starting from Xen 4.5 we state explicitly that XSM (Xen Security Module) policy file is named as xenpolicy-${XEN_FULLVERSION}.

Currently upstream 20_linux_xen doesn't support adding in entries with flask policy file. We're now carrying a patch based on Debian Wheezy's grub2-common 1.99-27+deb7u2 in our test system. Eventually we would like to upstream this patch.

Wiki page on XSM: http://wiki.xen.org/wiki/XSM

Wei Liu <liuw>

 

Attached Files
file #33941:  grub.v2.patch added by liuw (3KiB - application/octet-stream)
file #32276:  grub.patch added by liuw (3KiB - application/octet-stream)

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by phcoder (Updated the item)
  • -unavailable- added by arvidjaar (Posted a comment)
  • -unavailable- added by liuw
  • -unavailable- added by liuw (Submitted the item)
  •  

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follow 5 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Sun 05 Mar 2017 09:31:27 AM UTCphcoderPlanned Release2.02=>2.03+
    Wed 02 Mar 2016 02:35:53 PM UTCphcoderPlanned ReleaseNone=>2.02
    Wed 06 May 2015 01:08:04 PM UTCliuwAttached File-=>Added grub.v2.patch, #33941
    Tue 14 Oct 2014 09:17:47 PM UTCliuwCarbon-Copy-=>Added -unavailable-
    Tue 14 Oct 2014 09:15:10 PM UTCliuwAttached File-=>Added grub.patch, #32276

    Back to the top


    Powered by Savane 3.1-cleanup1