7 Commits

Author	SHA1	Message	Date
Marek Marczykowski-Górecki	bc3c9fa422	Generate initramfs in kernel-install hook ... The default one generates initramfs in location expected by Boot Loader Specification, which as noted before, isn't useful for Qubes. (cherry picked from commit fddeb4a23c)	2015-10-01 11:50:52 +02:00
Marek Marczykowski-Górecki	ed6ab1e598	Add kernel post-installation script to regenerate grub2 config ... Since we now allow using Fedora kernel, add a script to generate proper bootloader configuration then. Standard Fedora mechanism relies on Boot Loader Specification support in grub2, which sadly does not support Xen, so it is useless in Qubes. (cherry picked from commit 2a14ae9c0b) Conflicts: rpm_spec/core-dom0-linux.spec	2015-10-01 11:50:47 +02:00
Marek Marczykowski-Górecki	740994b8d9	Disable lesspipe in dom0 ... It can be dangerous when processing untrusted content (for example VM logs). Details: https://groups.google.com/d/msgid/qubes-users/20150527215812.GA13915%40mail-itl (cherry picked from commit 8acd40905d)	2015-09-27 23:41:23 +02:00
Marek Marczykowski-Górecki	9687180a62	udev: prevent dom0 processes from accessing templates root image	2014-07-04 04:29:31 +02:00
Marek Marczykowski-Górecki	5af0530e8d	udev: prevent VM disks content from being accessed by dom0 processes ... To not expose dom0 processes like blkid for attacks from VM (e.g. by placing malicious filesystem header in private.img).	2014-06-11 02:41:20 +02:00
Marek Marczykowski-Górecki	2c4aae132a	Use 'conntrack' iptables module instead of obsoleted 'state'	2014-04-04 11:30:55 +02:00
Marek Marczykowski	dbe9693851	Other Linux-specific files	2013-03-16 19:52:16 +01:00