bugGNU GRUB - Bugs: bug #43420, 20_linux_xen doesn't support Xen...


You are not allowed to post comments on this tracker with your current authentication level.

bug #43420: 20_linux_xen doesn't support Xen XSM policy file

Submitter:  Wei Liu <liuw>
Submitted:  Tue 14 Oct 2014 09:15:10 PM UTC
Category:  Configuration Severity:  Major
Priority:  5 - Normal Item Group:  Feature Request
Status:  None Privacy:  Public
Assigned to:  None Originator Name: 
Open/Closed:  Open Release:  Git master
Release:  Reproducibility:  Every Time
Planned Release:  2.03+

Wed 02 Mar 2016 02:42:51 PM UTC, comment #3: 

Hello, I received an email saying that this is going to be in 2.02 release.

If that's referring to merging this patch for 2.02, could you please hold it off until I confirm this is the agreed upon way of adding XSM modules?

The approach might have changed. I need some time to check.

Sorry for not having updated this bug report earlier!

Wei Liu <liuw>
Fri 08 May 2015 06:42:13 AM UTC, comment #2: 

Yes, I will bring this to the list at some point. I want to iron out rough edges in XSM first.

The wiki is a out of date now -- there have been changes to XSM recently, that's why we have a updated patch. I will fix it during our documentation day (which is held every month).


Wei Liu <liuw>
Wed 06 May 2015 05:33:12 PM UTC, comment #1: 

Such patches are better discussed on list for wider exposure.

Your second patch does not match wiki.

I do not think we want to always generate two menu entries. What is wrong with unconditionally loading XSM if present and letting user to enable/disable it in GRUB_CMDLINE_XEN as needed?

Andrei Borzenkov <arvidjaar>
Group Member
Tue 14 Oct 2014 09:15:10 PM UTC, original submission:  

Starting from Xen 4.5 we state explicitly that XSM (Xen Security Module) policy file is named as xenpolicy-${XEN_FULLVERSION}.

Currently upstream 20_linux_xen doesn't support adding in entries with flask policy file. We're now carrying a patch based on Debian Wheezy's grub2-common 1.99-27+deb7u2 in our test system. Eventually we would like to upstream this patch.

Wiki page on XSM: http://wiki.xen.org/wiki/XSM

Wei Liu <liuw>


(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attached Files
file #33941:  grub.v2.patch added by liuw (3KiB - application/octet-stream)
file #32276:  grub.patch added by liuw (3KiB - application/octet-stream)


Depends on the following items: None found

Items that depend on this one: None found


Carbon-Copy List
  • -email is unavailable- added by phcoder (Updated the item)
  • -email is unavailable- added by arvidjaar (Posted a comment)
  • -email is unavailable- added by liuw
  • -email is unavailable- added by liuw (Submitted the item)

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.


    Follow 5 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2017-03-05 phcoder Planned Release2.02 2.03+
    2016-03-02 phcoder Planned ReleaseNone 2.02
    2015-05-06 liuw Attached File- Added grub.v2.patch, #33941
    2014-10-14 liuw Carbon-Copy- Added -email is unavailable-
    2014-10-14 liuw Attached File- Added grub.patch, #32276

    Back to the top

    Powered by Savane 3.13-a854.
    Corresponding source code