[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Xen-users] Enable Data Execution Prevention for DomU

On 02/09/2015 02:11 PM, Thomas Strobel wrote:
> On 02/09/2015 11:58 AM, Ian Campbell wrote:
>> On Mon, 2015-02-09 at 10:29 +0100, Thomas Strobel wrote:
>>> Hi!
>>> I'm new to the xen-user mailing list, so before I start asking specific
>>> questions, some general information. I'm trying to integrate Xen, the
>>> XAPI toolstack
>> Note that the xapi toolstack is developed and supported elsewhere, you
>> may have more luck on the xen-api list, which is its development list.
>> Since the biggest xapi user is xenserver, you may also have more luck
>> over on the xenserver.org forums and lists, even if you aren't using
>> xenserver, since many of the xapi devs are there.
> Sorry, my introduction might have been confusing. I plan to use the xapi
> tools later on, but for now I'm just using the xl toolstack. Xen 4.5
> however has a few patches from the xenserver patch queue applied. If you
> think they are causing the problem, I can remove them and try with Xen
> 4.5 as released.
>>> The important part out of the VM configuration is:
>>> builder="hvm"
>>> memory=4096
>>> vcpus=4
>>> nx='1'
>>> nestedhvm='1'
>> This doesn't look like a xapi configuration file though. So perhaps I'm
>> confused --  what toolstack are you using?
>> The method for enabling NX will be inherently toolstack specific. What
>> you quote above looks right for an xl toolstack at least.
> Yes, it is xl toolstack. Any idea what could prevent NX from being enabled?
>> Ian.

The missing NX flag within domU was resolved by changing the kernel
build parameters for dom0. Afterwards, the configuration from above
worked fine.
Sorry for all the noise.

Xen-users mailing list



Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.