aboutsummaryrefslogtreecommitdiffstats
path: root/main/xen
Commit message (Collapse)AuthorAgeFilesLines
* main/*: replace all sbin/runscript with sbin/openrc-runNatanael Copa2015-04-286-18/+18
|
* main/xen: upgrade to 4.4.2Natanael Copa2015-04-2111-1160/+45
|
* main/*: remove libiconv-dev from makedependsNatanael Copa2015-04-091-1/+1
|
* main/xen: fix for xsa118Natanael Copa2015-03-132-1/+120
| | | | ref #3894
* main/xen: various sec fixes (xsa109 - xsa116)Natanael Copa2015-01-238-2/+997
| | | | | | | | | | | | | | | | | | | | | | | | | ref #3704 XSA-116 CVE-2015-0361 xen crash due to use after free on hvm guest teardown XSA-114 CVE-2014-9065 CVE-2014-9066 p2m lock starvation XSA-113 CVE-2014-9030 Guest effectable page reference leak in MMU_MACHPHYS_UPDATE handling XSA-112 CVE-2014-8867 Insufficient bounding of "REP MOVS" to MMIO emulated inside the hypervisor XSA-111 CVE-2014-8866 Excessive checking in compatibility mode hypercall argument translation XSA-110 CVE-2014-8595 Missing privilege level checks in x86 emulation of far branches XSA-109 CVE-2014-8594 Insufficient restrictions on certain MMU update hypercalls
* main/xen: add tmux supportNatanael Copa2014-11-243-21/+53
| | | | remove screen from deps. use no console as default
* main/xen: fix race in xendomains init.d scriptNatanael Copa2014-11-242-39/+59
| | | | | the gnu screen would show files in SCREENDIR before its ready to accept connections. so starting domains failed
* main/xen: write domain 0's domid to xenstoreNatanael Copa2014-11-032-7/+8
| | | | | | Since xen 4.4 we need set domid for dom0. see http://xenbits.xen.org/gitweb/?p=xen.git;a=patch;h=02ebea7768fe723deaa56c2cfcb860874544b47d
* main/xen: remove perl dependencyNatanael Copa2014-10-093-2/+101
| | | | use a tiny C program to do the file/fd compare instead of perl
* main/xen: split out python bits into py-xenNatanael Copa2014-10-091-2/+29
| | | | so we dont need pull in python as dependency
* main/xen: fix filename clash with qemu and cleanupNatanael Copa2014-10-097-94/+18
|
* main/xen: upgrade to 4.4.1 and remove xendNatanael Copa2014-10-0914-2014/+74
| | | | fixes #3228
* main/xen: upgrade to 4.3.3 and fix CVE-2014-7188Natanael Copa2014-10-022-6/+45
| | | | | | | | | | | | | | The following critical vulnerabilities have been fixed: - CVE-2014-2599 / XSA-89 HVMOP_set_mem_access is not preemptible - CVE-2014-3124 / XSA-92 HVMOP_set_mem_type allows invalid P2M entries to be created - CVE-2014-3967,CVE-2014-3968 / XSA-96 Vulnerabilities in HVM MSI injection - CVE-2014-4021 / XSA-100 Hypervisor heap contents leaked to guests Also add patch for xsa108: - CVE-2014-7188: Improper MSR range used for x2APIC emulation. ref #3412
* main/xen: integrate XSA-97 patchWilliam Pitcock2014-09-141-0/+2
|
* main/xen: security fix for XSA-97 (CVE-2014-5146,CVE-2014-5149)Natanael Copa2014-08-252-1/+490
| | | | ref #3290
* main/xen: fix hvmloaderNatanael Copa2014-08-254-1/+3048
| | | | | | | | | hvmloader is 32 bit but pulled in 64bit stdint from musl headers. we solve this by providing our own stdint_local.h elf.h pulls in stdint.h too so we ship our own elf_local.h too ref #3308
* main/xen: make sure /var/run/xen existsNatanael Copa2014-06-113-9/+11
| | | | | | | | | - start xendomains after localmount so localmount does not mount over our /var - add checkpath to xendomains, just in case ref #2837
* main/xen: revision bump (to resign)William Pitcock2014-04-251-1/+1
|
* main/xen: upgrade to 4.3.2William Pitcock2014-04-095-174/+27
|
* main/xen: fix uclibc regression in musl-support patchWilliam Pitcock2014-03-252-14/+3
|
* main/xen: update makedepends for autoreconfWilliam Pitcock2014-03-241-1/+1
|
* main/xen: pkgrel bumpWilliam Pitcock2014-03-241-1/+1
|
* main/xen: build_tools clean on muslWilliam Pitcock2014-03-242-3/+55
|
* main/xen: further work on muslWilliam Pitcock2014-03-242-0/+62
|
* main/xen: some work on muslWilliam Pitcock2014-03-241-1/+5
|
* xen: use posix syntax for findNatanael Copa2014-01-061-2/+3
| | | | seems like busybox 1.22 needs it
* main/xen: add makedepends on findutilsWilliam Pitcock2014-01-031-1/+1
|
* main/xen: fix checksumsWilliam Pitcock2014-01-031-3/+3
|
* Revert "Revert "main/xen: implement experimental support for running the ↵William Pitcock2014-01-034-12/+39
| | | | | | xenstore as a stubdomain"" This reverts commit 4c825a2884ff2910d84d948141f320bd3fad3b6c.
* Revert "main/xen: implement experimental support for running the xenstore as ↵Natanael Copa2014-01-034-39/+12
| | | | | | | | a stubdomain" fails to build and blocks build server This reverts commit 157e38bfbb80daadeea3df319acaa6a098a7c280.
* main/xen: implement experimental support for running the xenstore as a ↵William Pitcock2013-12-314-12/+39
| | | | stubdomain
* main/xen: security fix for XSA-75Natanael Copa2013-11-122-1/+60
| | | | ref #2298
* main/xen: upgrade to 4.3.1Natanael Copa2013-11-0610-634/+6
|
* main/xen: apply relevant XSA patches (XSA-62 through XSA-71)William Pitcock2013-11-019-1/+511
|
* main/xen: add XSA-73 patchWilliam Pitcock2013-11-012-1/+111
|
* main/xen: ipxe build fixNatanael Copa2013-10-212-2/+292
| | | | | fixes issue similar to this: https://bugs.gentoo.org/show_bug.cgi?id=487254
* main/xen: add general robustness patch for qemu's vncWilliam Pitcock2013-09-292-1/+73
|
* main/xen: implement hotplug script adding vTRILL support for situations ↵William Pitcock2013-09-272-1/+144
| | | | where dom0 is an RBridge
* main/xen: pkgrel bumpWilliam Pitcock2013-09-271-1/+1
|
* main/xen: more robust websockets vencrypt-bypass hackWilliam Pitcock2013-09-272-8/+58
|
* main/xen: add hack to force auth type to use plaintext on tls websocket for ↵William Pitcock2013-09-242-1/+16
| | | | noVNC
* main/xen: xen is no longer supported on x86-32, just x86-64William Pitcock2013-09-081-1/+1
|
* main/xen: qemu-coroutine-gthread.patch rebaseWilliam Pitcock2013-09-082-5/+5
|
* main/xen: decruft old and unused patchesWilliam Pitcock2013-09-081-10/+0
|
* main/xen: use gthread coroutine backend on qemu-xenWilliam Pitcock2013-09-082-1/+15
|
* main/xen: docs build fixWilliam Pitcock2013-09-082-3/+14
|
* main/xen: catch errors from individual build stepsWilliam Pitcock2013-09-081-5/+5
|
* main/xen: fix up qemu-xen-websocket patchWilliam Pitcock2013-09-082-5/+14
|
* main/xen: refactor build tasks and make them work independently as abuild stepsWilliam Pitcock2013-09-081-8/+41
|
* main/xen: initial rebase of patches, fixups neededWilliam Pitcock2013-09-0812-5443/+140
|