Re: [Xen-devel] [PATCH 0/3] domUloader

[Jeremy Katz <katzj@xxxxxxxxxx>]

On Tue, 2006-01-17 at 05:52 -0600, Anthony Liguori wrote: 
> Kurt Garloff wrote:
> >domUloader parses the bootentry (passed via --entry=) and the disk
> >setup (passed via --disks=). It then sets up loop devices as needed,
> >scans for partition tables (the exported disks / loop devs can
> >contain partitions) using kpartx (dm) and sets them up, so the kernel
> >and initrd can be copied to a temporary location in dom0. 
> >
> Just to clarify, this means that domU filesystems are being mounted in 
> dom0?  I knew there was some security concerns voiced about this many 
> months ago.  I think one of the advantages to using libext2 was that it 
> theoritically allowed the filesystem parsing to be done as a 
> non-privileged user.

The other concern with mounting is that there have been some cases where
changes to filesystems have broken reading new filesystems with older
kernels.  It's a lot easier to get the library that supports more (and
less has to be supported, so you're less likely to need to make changes)
than to upgrade your kernel for dom0

Jeremy


_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel