WARNING - OLD ARCHIVES

This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
   
 
 
Xen 		  
Home Products Support Community News
 
   
 

xen-ia64-devel

[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

[Xen-ia64-devel] [PATCH]: huge security hole

from [Tristan Gingold] [Permanent Link][Original]
To: xen-ia64-devel@xxxxxxxxxxxxxxxxxxx, "Magenheimer, Dan (HP Labs Fort Collins)" <dan.magenheimer@xxxxxx>, Alex Williamson <alex.williamson@xxxxxx>
Subject: [Xen-ia64-devel] [PATCH]: huge security hole
From: Tristan Gingold <Tristan.Gingold@xxxxxxxx>
Date: Mon, 20 Mar 2006 10:12:44 +0100
Delivery-date: Mon, 20 Mar 2006 09:09:50 +0000
Envelope-to: www-data@xxxxxxxxxxxxxxxxxxx
List-help: <mailto:xen-ia64-devel-request@lists.xensource.com?subject=help>
List-id: Discussion of the ia64 port of Xen <xen-ia64-devel.lists.xensource.com>
List-post: <mailto:xen-ia64-devel@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-ia64-devel>, <mailto:xen-ia64-devel-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-ia64-devel>, <mailto:xen-ia64-devel-request@lists.xensource.com?subject=unsubscribe>
Sender: xen-ia64-devel-bounces@xxxxxxxxxxxxxxxxxxx
User-agent: KMail/1.5 
Hi,

Check privilege level before pal/sal/efi calls.
Previously a user in dom0 was able to reboot the machine!

Note: there are still many security holes to fix!

Tested by boot+shutdown of dom0+domU, run of postat and regression.

Tristan.

Attachment: xen-security1.diffs
Description: Text Data

_______________________________________________
Xen-ia64-devel mailing list
Xen-ia64-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-ia64-devel
[More with this subject...]
<Prev in Thread] Current Thread [Next in Thread>
Previous by Date:  [Xen-ia64-devel] [RFC] The "vcpu->arch.privregs" is doubly used, Masaki Kanno
Next by Date:  Re: [Xen-ia64-devel] [RFC] The "vcpu->arch.privregs" is doubly used, Masaki Kanno
Previous by Thread:  [Xen-ia64-devel] [RFC] The "vcpu->arch.privregs" is doubly used, Masaki Kanno
Next by Thread:  [Xen-ia64-devel] Re: [PATCH]: huge security hole, Alex Williamson
Indexes:  [Date] [Thread] [Top] [All Lists]
 
   

Copyright 2005-2025, Citrix Systems Inc. All rights reserved. Legal and Privacy