tools: Restrict configuration of qemu processes
authorJim Fehlig <jfehlig@suse.com>
Tue, 15 Mar 2016 01:14:15 +0000 (01:14 +0000)
committerIan Jackson <Ian.Jackson@eu.citrix.com>
Thu, 24 Mar 2016 14:35:05 +0000 (14:35 +0000)
commit803aea1dd801b7a2a084323151f681078e30b7f9
tree0e97b3a9aa58d8e41a8325377611e26b3c4582d2
parent5963a60d4cb0ed7ff8adacf519310cf20e60eb64
tools: Restrict configuration of qemu processes

Commit 6ef823fd added '-nodefaults' to the qemu args created by
libxl, which is a good step in restricting qemu's default
configuration. This change takes another step by adding
-no-user-config, which ignores any user-provided config files in
sysconfdir. Together, -nodefaults and -no-user-config allow Xen
to avoid unkown and uncontrolled qemu configuration.

Both options are also added to the qemu invocation in the
xen-qemu-dom0-disk-backend systemd service file.

Signed-off-by: Jim Fehlig <jfehlig@suse.com>
Acked-by: Wei Liu <wei.liu2@citrix.com>
tools/hotplug/Linux/systemd/xen-qemu-dom0-disk-backend.service.in
tools/libxl/libxl_dm.c