Commit Graph

364 Commits

Author SHA1 Message Date
Vincent Penquerc'h
bac950c5ce qrexec-daemon: check we really did drop root privileges
and drop group privileges too while we're at it
2014-01-06 17:54:46 +01:00
Vincent Penquerc'h
5e4e1fe6ac qrexec-daemon: fix pathological break-out-of-wait-loop
If the timeout is 1, attempting to retry would not actually retry,
since i would be incremented just after being reset to 0, and would
thus break out of the loop.
2014-01-06 17:54:46 +01:00
Vincent Penquerc'h
e88faee9dd qrexec-daemon: reject negative timeouts 2014-01-06 17:54:46 +01:00
Vincent Penquerc'h
259d7aaf78 qrexec-daemon: use fully qualified path to kdialog/zenity 2014-01-06 17:54:46 +01:00
Vincent Penquerc'h
67f27bd94f qrexec-daemon: make children_count volatile
It's decremented in a signal handler
2014-01-06 17:54:46 +01:00
Vincent Penquerc'h
97c7c97420 qrexec-policy: warn if some data is ignored
Something like vm1 vm2 allow, user=foo would be 4 items,
and the user part would be ignored by the parser.
It might or might not be better to error out instead of
just warning, though...
2014-01-06 17:54:46 +01:00
Marek Marczykowski-Górecki
7ad1183793 rpm: speedup package installation
Do not rebuild cache after each icon installation.
2013-12-26 05:07:11 +01:00
Marek Marczykowski-Górecki
7a1f24111f version 2.0.5 2013-12-17 15:03:46 +01:00
Olivier MEDOC
9cb10f4805 appmenus: allow parenthesis in exec directive for special path such as Program Files (x86) 2013-12-14 03:57:26 +01:00
Joanna Rutkowska
76769ab761 version 2.0.4 2013-12-10 20:12:29 +01:00
Joanna Rutkowska
d735319288 Merge branch 'master' of git://git.qubes-os.org/marmarek/core-admin-linux 2013-12-10 20:12:23 +01:00
Marek Marczykowski-Górecki
2db344e7a9 pm-utils: do not load not used pm_functions 2013-12-10 20:02:35 +01:00
Joanna Rutkowska
9608887644 version 2.0.3 2013-12-10 19:30:28 +01:00
Marek Marczykowski-Górecki
d3f27e2483 pm-utils: add missing qubes-sync-vms-clock script to systemd service 2013-12-10 14:27:48 +01:00
Joanna Rutkowska
1932846612 version 2.0.2 2013-12-06 11:16:32 +01:00
Marek Marczykowski-Górecki
69b1688645 hvm: fix internet explorer menu entry
'\' needs to be escaped.
2013-12-06 07:03:56 +01:00
Marek Marczykowski-Górecki
f32137825c hvm: change explorer shortcut name 2013-12-06 06:37:29 +01:00
Joanna Rutkowska
89d25761bc version 2.0.1 2013-12-04 16:07:06 +01:00
Marek Marczykowski-Górecki
c000f24def appmenus: fallback hardcoded appmenus for HVM with qrexec installed
If VM didn't returned any appmenus data, the service is most likely not
available there. Actually it hasn't been written yet.
2013-12-04 03:05:34 +01:00
Marek Marczykowski-Górecki
190d52b6fb appmenus: add QubesVm.appmenus_recreate method 2013-12-04 03:03:48 +01:00
Joanna Rutkowska
0f669a68b4 version 1.1.4 2013-11-25 13:36:44 +01:00
Marek Marczykowski-Górecki
9313be30ff appmenus: fix the code for creating standalone VMs
... without source template. Especially HVM and HVM template.
2013-11-25 07:19:20 +01:00
Joanna Rutkowska
b7bfb69d78 version 1.1.3 2013-11-22 14:43:46 +01:00
Marek Marczykowski-Górecki
4893b28751 appmenus: fix handling template VMs and HVMs
Adding separate hook for QubesTemplateVm doesn't work - this refers to
the same hook list as in base class. But actually generic hook covers
template case without any change.

Also do not skip adding appmenus for HVM
2013-11-22 03:59:06 +01:00
Marek Marczykowski-Górecki
acb8657735 appmenus: force ASCII sort order
In some locales (namely Estonian) [A-Z] doesn't match all the letters.
2013-11-16 11:46:53 +01:00
Marek Marczykowski-Górecki
8dbbf6a9a7 Merge remote-tracking branch 'joanna/master' 2013-11-14 23:27:00 +01:00
Marek Marczykowski-Górecki
68186cb980 qfile-dom0-unpacker: add '-v' option - print archive file list while extracting
This is used by backup-restore tool to handle already received files
immediately.
2013-11-09 19:06:18 +01:00
Joanna Rutkowska
2d7749e466 version 1.1.2 2013-11-06 09:47:21 -05:00
Joanna Rutkowska
ad8cb93454 Merge branch 'master' of git://git.qubes-os.org/marmarek/core-admin-linux 2013-11-06 09:47:12 -05:00
Marek Marczykowski-Górecki
2b716bc141 pm-utils: do not load PM_FUNCTIONS - not used in our scripts
And not available when called from systemd
2013-11-06 15:42:59 +01:00
Joanna Rutkowska
18e752da96 version 1.1.1 2013-11-06 06:57:26 -05:00
Marek Marczykowski-Górecki
c09b02a6c7 Merge branch 'master' of git://git.qubes-os.org/joanna/core-admin-linux 2013-11-04 01:46:40 +01:00
Marek Marczykowski-Górecki
d0509caf9e pm-utils: hook qubes suspend scripts to systemd
Apparently new KDE doesn't call pm-suspend anymore, instead use systemd
suspend logic. So hook our scripts also there.
2013-11-04 01:28:36 +01:00
Joanna Rutkowska
995534cd39 version 1.1.0 2013-11-02 12:55:53 -04:00
Marek Marczykowski-Górecki
05390894be Qrexec: log allowed RPC calls 2013-10-27 19:23:09 +01:00
Marek Marczykowski-Górecki
0ab5a89895 Minor whitespace fix 2013-10-27 19:22:47 +01:00
Marek Marczykowski-Górecki
ce971eaa54 qrexec: don't wait indefinitely if the daemon startup failed
Count started children and if the last one exits before getting SIGUSR1
(confirmation of successful daemon startup) report failure.
2013-10-27 17:19:43 +01:00
Marek Marczykowski-Górecki
9f62349732 pm-utils: try to suspend the VMs instead of just pause 2013-10-23 21:59:29 +02:00
Marek Marczykowski-Górecki
19e7663928 qrexec-daemon: optionally don't wait for connection to the VM
Will be used to keep qrexec-daemon running in the background even if no
qrexec-agent installed (yet). Specifically to give the VM a chance to
inform about just installed agent.
2013-10-23 05:43:37 +02:00
Marek Marczykowski-Górecki
aa5635b4f5 rpm: fix policy/qubes.SyncAppMenus name (v2) 2013-10-23 05:40:27 +02:00
Marek Marczykowski-Górecki
72b528ddd1 Revert "rpm: fix policy/qubes.SyncAppMenus name"
This reverts commit de087e9b8d.
Mangled two changes together.
2013-10-23 05:39:46 +02:00
Marek Marczykowski-Górecki
de087e9b8d rpm: fix policy/qubes.SyncAppMenus name 2013-10-23 00:25:50 +02:00
Joanna Rutkowska
f2d5d41c06 version 1.0.1 2013-10-18 11:07:46 +02:00
Marek Marczykowski-Górecki
28aa4d992f qrexec: display VM name in connect timeout message (#723)
Now it is possible, as we have domain name from cmdline.
2013-10-18 03:47:58 +02:00
Marek Marczykowski-Górecki
c92bc0a05c qrexec: use VM name in log filename 2013-10-18 02:27:46 +02:00
Marek Marczykowski
cf8959dbfe qrexec: get domain name from cmdline
libvchan_get_domain_name will be removed
2013-10-18 02:26:54 +02:00
Marek Marczykowski-Górecki
3379c343bc version 1.0 2013-09-17 00:04:45 +02:00
Marek Marczykowski-Górecki
c95cd3a054 qrexec: validate target domain (#743) 2013-08-15 00:01:56 +02:00
Marek Marczykowski-Górecki
aedd97bb3a qrexec: minor formating fix 2013-08-15 00:01:41 +02:00
Marek Marczykowski-Górecki
b4ab187793 dracut: change the way to include ehci-pci module
Apparently add_drivers doesn't work. Looking at kernel-modules dracut
code, it can only be used for block-device driver and only makes sense
in --host-only mode.
So add additional module, which unconditionally install kernel modules.
2013-08-13 00:39:35 +02:00