Xen 
 
Home About Xen.org Xen Xen Summit Wiki Mailing List Bug Tracker Xen Downloads
 
   
 

xen-devel

RE: [Xen-devel] [PATCH 1/2] libfsimage

To: "Stephen C. Tweedie" <sct@xxxxxxxxxx>
Subject: RE: [Xen-devel] [PATCH 1/2] libfsimage
From: "Ian Pratt" <m+Ian.Pratt@xxxxxxxxxxxx>
Date: Mon, 30 Oct 2006 14:20:33 -0000
Cc: xen-devel@xxxxxxxxxxxxxxxxxxx, Ian Pratt <Ian.Pratt@xxxxxxxxxxxx>, John Levon <levon@xxxxxxxxxxxxxxxxx>
Delivery-date: Mon, 30 Oct 2006 06:21:35 -0800
Envelope-to: www-data@xxxxxxxxxxxxxxxxxx
List-help: <mailto:xen-devel-request@lists.xensource.com?subject=help>
List-id: Xen developer discussion <xen-devel.lists.xensource.com>
List-post: <mailto:xen-devel@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-devel>, <mailto:xen-devel-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-devel>, <mailto:xen-devel-request@lists.xensource.com?subject=unsubscribe>
Sender: xen-devel-bounces@xxxxxxxxxxxxxxxxxxx
Thread-index: Acb8LZpuuF3YMWYdQ1elfumNbihQcgAAHUIg
Thread-topic: [Xen-devel] [PATCH 1/2] libfsimage
> > [Apparently, libresierfs is moribund and doesn't actually support 
> > current v3 filesystems anyhow. We need to look at other ways of 
> > pulling kernels out.]
> 
> Ugh.  So is pygrub non-functional on Novell/SuSE systems on reiserfs?
> Or are they using a patched libreiserfs?

They use domUloader, which mounts the filesystem and copies out the
kernels. I worry that a maliciously crafted fs image would compromise
dom0.
 
> > As I understand it, John's scheme doesn't necessarily prevent using 
> > the existing libraries -- you could have external binaries linked 
> > against the existing libraries, or you could choose to 
> statically link 
> > if your distro didn't normally include those libraries.
> 
> Well, the patches as presented moved all the reiser/ext2 
> knowledge into pygrub itself.  I'm certainly not opposed to 
> changes to the pygrub interface, just to unnecessary 
> replicating of fs-specific code inside the Xen tools.

I most confess to not atually having read the patches...  What I
imagined was a way of invoking a binary (or script) to read a file from
a filesystem. The binary might be linked against e.g. libext2fs, or have
an fs parsing implementation compiled in.

Ian

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel