Re: [Xen-devel] [PATCH] pv-grub: Support bzip2, xz and lzo compressed kernels

[Ian Campbell <Ian.Campbell@xxxxxxxxxx>]

On Fri, 2013-01-04 at 12:33 +0000, Bastian Blank wrote:
> On Fri, Jan 04, 2013 at 11:56:33AM +0000, Ian Campbell wrote:
> > xz compressed kernels seem to be what we are starting to see in the
> > wild, but we may as well support everything that libxc does in
> > pv-grub.
> > Also update the zlib library to the latest version
> 
> Is there a reason not to use the implementations used by the hypervisor?

Decompressing a potentially untrusted compressed file in the context of
the hypervisor would open you up to all sorts of security issues. One of
the points of pv-grub is that the untrusted code runs only with guest
privileges.

Ian.


_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxx
http://lists.xen.org/xen-devel