summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* app-emulation/qemu: Revert: update 2.11.1-r52, 9999Matthias Maier2018-03-272-2/+0
| | | | This reverts commit 289a2b775c75dd1e88aa972642624a0bf692e957.
* app-emulation/qemu: Revert: add rule to fix permissions on /dev/vfio/vfioMatthias Maier2018-03-272-3/+0
| | | | This reverts commit 2fc1bc6c7b1f41a3a7df74ce8e170996eb7e36d9.
* app-emulation/qemu: update 2.11.1-r52, 9999Matthias Maier2018-03-272-0/+2
| | | | Package-Manager: Portage-2.3.24, Repoman-2.3.6
* app-emulation/qemu: add rule to fix permissions on /dev/vfio/vfioMatthias Maier2018-03-272-0/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The device node /dev/vfio/vfio gets created on modprobing the vfio* modules. This happens in particular on demand when a qemu vm with PCI passthrough is started up. The default permissios for the freshly created device node is crw-rw-rw- 1 root root 10, 196 Mar 27 08:44 /dev/vfio/vfio This is terrible. This patch adds an udev rules and makes sure that the device node has rw permissions for user root, and group kvm (and no permissions for all). This fixes - startup when a qemu-kvm is started as non-root (provided the user is in group kvm, which is our current policy for accessing /dev/kvm, etc., anyway). - work around this security vulnerability, where /dev/vfio/vfio is created with world writable permissions upon modprobe. [1] Thanks to username234, Kash Pande, Ted Rodgers for discovery and patch! [1] Steps to reproduce: % ls -la /dev/vfio/vfio crw------- 1 root root 10, 196 Mar 27 15:40 /dev/vfio/vfio % modprobe vfio % ls -la /dev/vfio/vfio crw-rw-rw- 1 root root 10, 196 Mar 27 15:41 /dev/vfio/vfio [2] I cannot find an udev rule installed by libvirt/qemu/... that triggers these permissions. Bug: https://bugs.gentoo.org/651668 Package-Manager: Portage-2.3.24, Repoman-2.3.6 RepoMan-Options: --force
* app-emulation/qemu: drop obsolete fileMatthias Maier2018-03-271-1/+0
| | | | Package-Manager: Portage-2.3.24, Repoman-2.3.6
* app-emulation/kompose: Remove oldManuel Rüger2018-03-273-62/+0
| | | | Package-Manager: Portage-2.3.24, Repoman-2.3.6
* app-emulation/kompose: Version bump to 1.11.0Manuel Rüger2018-03-272-0/+31
| | | | Package-Manager: Portage-2.3.24, Repoman-2.3.6
* app-emulation/spice-vdagent: Installed content likely changed.Jeroen Roovers2018-03-271-0/+0
| | | | | Package-Manager: Portage-2.3.24, Repoman-2.3.6 RepoMan-Options: --force
* app-emulation/spice-vdagent: Run eautoreconf (bug #651102).Jeroen Roovers2018-03-271-2/+7
| | | | Package-Manager: Portage-2.3.24, Repoman-2.3.6
* app-emulation/xe-guest-utilities: use HTTPSMichael Mair-Keimberger2018-03-263-6/+6
| | | | Closes: https://github.com/gentoo/gentoo/pull/7594
* app-emulation/vice: x86 stable (bug #648890)Thomas Deutschmann2018-03-261-1/+1
| | | | Package-Manager: Portage-2.3.24, Repoman-2.3.6
* app-emulation/virtualbox-modules: use HTTPSMichael Mair-Keimberger2018-03-254-4/+4
| | | | Closes: https://github.com/gentoo/gentoo/pull/7596
* app-emulation/virt-manager-9999: Drop python2 supportMichal Privoznik2018-03-241-4/+1
| | | | | | | | | | | | With upstream commit of bd891eb380cdf771f0296a39193614a10749088b virt-manager is strictly python3 only. Update the ebuild to follow this change. Closes: https://bugs.gentoo.org/650790 Closes: https://bugs.gentoo.org/647376 Signed-off-by: Michal Privoznik <mprivozn@redhat.com> Signed-off-by: Matthias Maier <tamiko@gentoo.org>
* app-emulation/libvirt: address QA messagesMatthias Maier2018-03-232-4/+2
| | | | | | | | * use printf instead of echo -n * remove dyanmically created directories Closes: https://bugs.gentoo.org/651296 Package-Manager: Portage-2.3.24, Repoman-2.3.6
* app-emulation/docker: Version bump to 18.03.0; switch back from docker-runc ↵Manuel Rüger2018-03-232-0/+302
| | | | | | to runc Package-Manager: Portage-2.3.24, Repoman-2.3.6
* app-emulation/docker-proxy: Sync live ebuildManuel Rüger2018-03-231-3/+5
| | | | Package-Manager: Portage-2.3.24, Repoman-2.3.6
* app-emulation/docker-proxy: Update snapshotManuel Rüger2018-03-232-0/+37
| | | | Package-Manager: Portage-2.3.24, Repoman-2.3.6
* app-emulation/libvirt: Update live ebuild, ebuild maintenanceMichal Prívozník2018-03-232-1/+197
| | | | | | | | Fixes: https://bugs.gentoo.org/648868 Signed-off-by: Michal Privoznik <michal.privoznik@gmail.com> Signed-off-by: Michal Privoznik <mprivozn@redhat.com> Signed-off-by: Matthias Maier <tamiko@gentoo.org>
* app-emulation/libvirt: 4.1.0-r2: Apply upstream patch for bridge supportMatthias Maier2018-03-232-8/+80
| | | | | | | | | | | | | | Apply an upstream patch to reenable bridge support even if USE=-virt-network and automatic network support is compiled out of libvirt Thanks to Agostino Sarubbo for upstream report and mentioning the upstream patch. Patch: https://www.redhat.com/archives/libvir-list/2018-March/msg01461.html Bug: https://bugs.gentoo.org/650660 Bug: https://bugs.gentoo.org/650872 Package-Manager: Portage-2.3.24, Repoman-2.3.6
* app-emulation/diskimage-builder: 2.12.1 bup and cleanupMatthew Thode2018-03-222-1/+1
| | | | Package-Manager: Portage-2.3.24, Repoman-2.3.6
* app-emulation/qt-virt-manager: fix download URLFrancesco Turco2018-03-221-2/+2
| | | | | Closes: https://github.com/gentoo/gentoo/pull/7523 Signed-off-by: Matthias Maier <tamiko@gentoo.org>
* app-emulation/docker: Stabilize on amd64Manuel Rüger2018-03-211-1/+1
| | | | Package-Manager: Portage-2.3.24, Repoman-2.3.6
* app-emulation/qemu: update live ebuildMatthias Maier2018-03-201-0/+1
| | | | Package-Manager: Portage-2.3.24, Repoman-2.3.6
* app-emulation/diskimage-builder: 2.12.0 bupMatthew Thode2018-03-202-0/+38
| | | | Package-Manager: Portage-2.3.24, Repoman-2.3.6
* app-emulation/libvirt: Update live ebuild, ebuild maintenanceMatthias Maier2018-03-203-3/+12
| | | | Package-Manager: Portage-2.3.24, Repoman-2.3.6
* app-emulation/libvirt: 4.1.0-r1 try to fix the network mess...Matthias Maier2018-03-201-0/+391
| | | | Package-Manager: Portage-2.3.24, Repoman-2.3.6
* app-emulation/flannel: Remove oldManuel Rüger2018-03-202-52/+0
| | | | Package-Manager: Portage-2.3.24, Repoman-2.3.6
* app-emulation/q4wine: use HTTPSMichael Mair-Keimberger2018-03-202-3/+3
| | | | Closes: https://github.com/gentoo/gentoo/pull/7489
* app-emulation/free42: amd64 stable wrt bug #650826Agostino Sarubbo2018-03-201-1/+1
| | | | | | Signed-off-by: Agostino Sarubbo <ago@gentoo.org> Package-Manager: Portage-2.3.19, Repoman-2.3.6 RepoMan-Options: --include-arches="amd64"
* app-emulation/glean: Initial importAlexey Shvetsov2018-03-204-0/+62
| | | | Package-Manager: Portage-2.3.19, Repoman-2.3.6
* app-emulation/docker-runc: Remove oldManuel Rüger2018-03-193-120/+0
| | | | Package-Manager: Portage-2.3.24, Repoman-2.3.6
* app-emulation/docker-proxy: Remove oldManuel Rüger2018-03-192-35/+0
| | | | Package-Manager: Portage-2.3.24, Repoman-2.3.6
* app-emulation/docker-runc: Stabilize on amd64Manuel Rüger2018-03-191-1/+1
| | | | Package-Manager: Portage-2.3.24, Repoman-2.3.6
* app-emulation/containerd: Stabilize 1.0.1 on amd64Manuel Rüger2018-03-191-1/+1
| | | | Package-Manager: Portage-2.3.24, Repoman-2.3.6
* app-emulation/docker: Remove oldManuel Rüger2018-03-192-317/+0
| | | | Package-Manager: Portage-2.3.24, Repoman-2.3.6
* app-emulation/spice-protocol: amd64 stable wrt bug #650878Agostino Sarubbo2018-03-191-2/+2
| | | | | | Signed-off-by: Agostino Sarubbo <ago@gentoo.org> Package-Manager: Portage-2.3.19, Repoman-2.3.6 RepoMan-Options: --include-arches="amd64"
* app-emulation/spice: amd64 stable wrt bug #650878Agostino Sarubbo2018-03-191-1/+1
| | | | | | Signed-off-by: Agostino Sarubbo <ago@gentoo.org> Package-Manager: Portage-2.3.19, Repoman-2.3.6 RepoMan-Options: --include-arches="amd64"
* app-emulation/spice-vdagent: amd64 stable wrt bug #650020Agostino Sarubbo2018-03-191-1/+1
| | | | | | Signed-off-by: Agostino Sarubbo <ago@gentoo.org> Package-Manager: Portage-2.3.19, Repoman-2.3.6 RepoMan-Options: --include-arches="amd64"
* app-emulation/diskimage-builder: 2.11.0 stable amd64 and x86Matthew Thode2018-03-191-1/+1
| | | | Package-Manager: Portage-2.3.24, Repoman-2.3.6
* app-emulation/spice-vdagent: version bump to 0.17.0_p20180319Matthias Maier2018-03-192-0/+71
| | | | | | Bug: https://bugs.gentoo.org/650020 Package-Manager: Portage-2.3.24, Repoman-2.3.6
* app-emulation/spice: Update patchMatthias Maier2018-03-191-1/+1
| | | | | | | Thanks for the bug report and the suggested fix! Closes: https://bugs.gentoo.org/647406 Package-Manager: Portage-2.3.24, Repoman-2.3.6
* app-emulation/spice: update live ebuildMatthias Maier2018-03-191-4/+3
| | | | Package-Manager: Portage-2.3.24, Repoman-2.3.6
* app-emulation/spice: fix dependencyMatthias Maier2018-03-191-0/+1
| | | | | Closes: https://bugs.gentoo.org/647722 Package-Manager: Portage-2.3.24, Repoman-2.3.6
* app-emulation/qemu: amd64 stable wrt bug #649616Mikle Kolyada2018-03-191-1/+1
| | | | Package-Manager: Portage-2.3.24, Repoman-2.3.6
* app-emulation/qemu: fix capstone dependencyMatthias Maier2018-03-181-0/+1
| | | | Package-Manager: Portage-2.3.24, Repoman-2.3.6
* app-emulation/qemu-guest-agent: version bump to 2.11.1Matthias Maier2018-03-182-0/+83
| | | | Package-Manager: Portage-2.3.24, Repoman-2.3.6
* app-emulation/qemu-guest-agent: 2.10.1: Fix dependenciesMatthias Maier2018-03-181-3/+3
| | | | | Closes: https://bugs.gentoo.org/647368 Package-Manager: Portage-2.3.24, Repoman-2.3.6
* app-emulation/qemu-guest-agent: drop 2.10.1Matthias Maier2018-03-182-83/+0
| | | | Package-Manager: Portage-2.3.24, Repoman-2.3.6
* app-emulation/vpcs: drop to maintainer-neededAaron Bauman2018-03-181-4/+1
|
* app-emulation/qemu: restore keywordsMatthias Maier2018-03-181-2/+1
| | | | Package-Manager: Portage-2.3.24, Repoman-2.3.6