From patchwork Thu Jun 2 15:10:32 2016 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ian Jackson X-Patchwork-Id: 9150583 Return-Path: Received: from mail.wl.linuxfoundation.org (pdx-wl-mail.web.codeaurora.org [172.30.200.125]) by pdx-korg-patchwork.web.codeaurora.org (Postfix) with ESMTP id 347B760221 for ; Thu, 2 Jun 2016 15:12:54 +0000 (UTC) Received: from mail.wl.linuxfoundation.org (localhost [127.0.0.1]) by mail.wl.linuxfoundation.org (Postfix) with ESMTP id 0BC072654B for ; Thu, 2 Jun 2016 15:12:54 +0000 (UTC) Received: by mail.wl.linuxfoundation.org (Postfix, from userid 486) id F31E12830D; Thu, 2 Jun 2016 15:12:53 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on pdx-wl-mail.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-4.2 required=2.0 tests=BAYES_00, RCVD_IN_DNSWL_MED autolearn=ham version=3.3.1 Received: from lists.xenproject.org (lists.xenproject.org [192.237.175.120]) (using TLSv1.2 with cipher AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mail.wl.linuxfoundation.org (Postfix) with ESMTPS id 523E02654B for ; Thu, 2 Jun 2016 15:12:52 +0000 (UTC) Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b8UGp-0006mM-H8; Thu, 02 Jun 2016 15:10:51 +0000 Received: from mail6.bemta5.messagelabs.com ([195.245.231.135]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b8UGo-0006lq-2w for xen-devel@lists.xensource.com; Thu, 02 Jun 2016 15:10:50 +0000 Received: from [85.158.139.211] by server-7.bemta-5.messagelabs.com id 89/A8-14119-97C40575; Thu, 02 Jun 2016 15:10:49 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFupmkeJIrShJLcpLzFFi42JxWrrBXrfSJyD coHuvrMW9Ke/ZHRg9tvftYg9gjGLNzEvKr0hgzZi6PbXgIUfF9FUHWBoYj7N3MXJySAj4S5xZ 9gTMZhPQlWja8pcNxBYRUJY43vSFtYuRg4NZoETi7wcpkLCwgIVE27P5jCA2i4CKxKWN08FsX gF3iZ03LzNCjFSU6H42AWwMp4CHROeddcwgY4SAat6+tYYw1STmro+H6BSUODnzCQuIzSwgIX HwxQuwagkBbom/3fYTGPlmIamahaRqASPTKkb14tSistQiXUO9pKLM9IyS3MTMHF1DA1O93NT i4sT01JzEpGK95PzcTYzAQKpnYGDcwdjU63yIUZKDSUmUd2WZf7gQX1J+SmVGYnFGfFFpTmrx IUYZDg4lCd513gHhQoJFqempFWmZOcCQhklLcPAoifBGg6R5iwsSc4sz0yFSpxgVpcR5t4EkB EASGaV5cG2wOLrEKCslzMvIwMAgxFOQWpSbWYIq/4pRnINRSZj3M8gUnsy8Erjpr4AWMwEtLn jkD7K4JBEhJdXAWLdFNbDHjT1O1iIiU60xIrD9X9MmwXfvkrMzfyd8cOA4IuUtEbRtdnymtLr dkZyaPemT4uvE9m8SmeruuLphkXjxJaGevYxF+1dsVpgxyUVy7pf6U3PnzY2JPLb+1lVTB5fD XXdOPC6wXSl/57x1otSXrttLLr++GfP+v/X/f5nK2SpiRZKKSizFGYmGWsxFxYkAt5pP754CA AA= X-Env-Sender: prvs=9546100bf=Ian.Jackson@citrix.com X-Msg-Ref: server-9.tower-206.messagelabs.com!1464880244!43001008!3 X-Originating-IP: [66.165.176.63] X-SpamReason: No, hits=0.0 required=7.0 tests=sa_preprocessor: VHJ1c3RlZCBJUDogNjYuMTY1LjE3Ni42MyA9PiAzMDYwNDg=\n, received_headers: No Received headers X-StarScan-Received: X-StarScan-Version: 8.46; banners=-,-,- X-VirusChecked: Checked Received: (qmail 17637 invoked from network); 2 Jun 2016 15:10:49 -0000 Received: from smtp02.citrix.com (HELO SMTP02.CITRIX.COM) (66.165.176.63) by server-9.tower-206.messagelabs.com with RC4-SHA encrypted SMTP; 2 Jun 2016 15:10:49 -0000 X-IronPort-AV: E=Sophos;i="5.26,406,1459814400"; d="scan'208";a="364877191" From: Ian Jackson To: Date: Thu, 2 Jun 2016 16:10:32 +0100 Message-ID: <1464880232-893-4-git-send-email-ian.jackson@eu.citrix.com> X-Mailer: git-send-email 1.7.10.4 In-Reply-To: <1464880232-893-1-git-send-email-ian.jackson@eu.citrix.com> References: <1464880232-893-1-git-send-email-ian.jackson@eu.citrix.com> MIME-Version: 1.0 X-DLP: MIA1 Cc: Ian Jackson , Wei Liu Subject: [Xen-devel] [PATCH 3/3] libxl: Document ~/serial/ correctly X-BeenThere: xen-devel@lists.xen.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: Xen developer discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-devel-bounces@lists.xen.org Sender: "Xen-devel" X-Virus-Scanned: ClamAV using ClamSMTP xenstore-paths.markdown talked about ~/device/serial/, but that's not used. (It is very wrong for this value, which contains a driver domain filesystem path, to be in the guest's area of xenstore. However, it is only ever created by libxl and ready by xenconsoled. When it is created, it inherits the read-only permissions of /local/domain/DOMID. So there is no security bug.) This is a followup to XSA-175. Signed-off-by: Ian Jackson Reviewed-by: Wei Liu --- docs/misc/xenstore-paths.markdown | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/misc/xenstore-paths.markdown b/docs/misc/xenstore-paths.markdown index 261ee42..c6b4dab 100644 --- a/docs/misc/xenstore-paths.markdown +++ b/docs/misc/xenstore-paths.markdown @@ -283,7 +283,7 @@ The primary PV console device. Described in [console.txt](console.txt) A secondary PV console device. Described in [console.txt](console.txt) -#### ~/device/serial/$DEVID/* [HVM] +#### ~/serial/$DEVID/* [HVM] An emulated serial device. Described in [console.txt](console.txt)