f795e58483
Undo 'Boot Loader Spec' by deleting /boot/MACHINE_ID
...
The specification doesn't cover how to boot Xen (or any other multiboot
binary), but the sole presence of such directory changes dracut default
path. So get rid of that directory.
9 years ago
fddeb4a23c
Generate initramfs in kernel-install hook
...
The default one generates initramfs in location expected by Boot Loader
Specification, which as noted before, isn't useful for Qubes.
9 years ago
2a14ae9c0b
Add kernel post-installation script to regenerate grub2 config
...
Since we now allow using Fedora kernel, add a script to generate proper
bootloader configuration then. Standard Fedora mechanism relies on
Boot Loader Specification support in grub2, which sadly does not support
Xen, so it is useless in Qubes.
9 years ago
8acd40905d
Disable lesspipe in dom0
...
It can be dangerous when processing untrusted content (for example VM
logs).
Details:
https://groups.google.com/d/msgid/qubes-users/20150527215812.GA13915%40mail-itl
9 years ago
c457b485cb
Load xen-acpi-processor module
...
It is required for cpufreq to work.
9 years ago
5035fc7eed
Remove iptables config
...
Dom0 have no network at all, it isn't needed.
9 years ago
4449d51d98
udev: prevent race with kpartx -d
...
udevd calls (internal) blkid, which opens the device, so kpartx -d
cannot remove it.
10 years ago
9687180a62
udev: prevent dom0 processes from accessing templates root image
10 years ago
5af0530e8d
udev: prevent VM disks content from being accessed by dom0 processes
...
To not expose dom0 processes like blkid for attacks from VM (e.g. by
placing malicious filesystem header in private.img).
10 years ago
2c4aae132a
Use 'conntrack' iptables module instead of obsoleted 'state'
10 years ago
dbe9693851
Other Linux-specific files
11 years ago
Marek Marczykowski-Górecki