[Bug 569741] New: more-secure Xen PVGRUB missing from distro
http://bugzilla.novell.com/show_bug.cgi?id=569741 http://bugzilla.novell.com/show_bug.cgi?id=569741#c0 Summary: more-secure Xen PVGRUB missing from distro Classification: openSUSE Product: openSUSE 11.2 Version: Final Platform: All OS/Version: openSUSE 11.2 Status: NEW Severity: Normal Priority: P5 - None Component: Xen AssignedTo: jdouglas@novell.com ReportedBy: 0.bugs.only.0@gmail.com QAContact: qa@suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.0) Gecko/20100105 SUSE/3.6rc1-1.2 Firefox/3.6 Xen's PVGRUB has been available as a more secure -- using resources ONLY from the DomU, with no access to Dom0 required -- replacement for PY-GRUB since Xen v3.3, ~ Aug 2008; @ numerous references: "As a result, PV-GRUB is far more secure than PyGRUB ..." http://article.gmane.org/gmane.comp.emulators.xen.user/50293 http://wiki.xensource.com/xenwiki/PvGrub http://blog.xen.org/index.php/2008/08/28/xen-33-feature-pv-grub/ http://www.xen.org/files/xensummitboston08/SamThibault_XenSummit.pdf http://backdrift.org/xen-pvgrub-howto http://cosi.clarkson.edu/docs/installingxen/2009/Xen_Training_Sessions_2009.... http://vmblog.com/archive/2008/08/25/xen-3-3-is-now-available-for-download.a... etc etc ... Currently @ Xen >= v3.4.1, *Suse distros lack any PVGRUB option/support. In addition to simply supporting a complete Xen feature set, this should be considered a security issue rather than labeled a feature request. Reproducible: Always Steps to Reproduce: 1. 2. 3. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=569741 http://bugzilla.novell.com/show_bug.cgi?id=569741#c Jason Douglas <jdouglas@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |carnold@novell.com, | |jdouglas@novell.com AssignedTo|jdouglas@novell.com |jfehlig@novell.com -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=569741 http://bugzilla.novell.com/show_bug.cgi?id=569741#c1 mail ignored <0.bugs.only.0@gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P3 - Medium Severity|Normal |Major --- Comment #1 from mail ignored <0.bugs.only.0@gmail.com> 2010-01-22 04:29:54 UTC --- raising the priority/severity to 'mid', as not clear how to label it a security issue ... please comment & adjust. ideally, added to stable 3.4.1+patches (3.4.2's already stable; 3.4.3 soon?) release. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=569741 http://bugzilla.novell.com/show_bug.cgi?id=569741#c2 mail ignored <0.bugs.only.0@gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO Info Provider| |jfehlig@novell.com --- Comment #2 from mail ignored <0.bugs.only.0@gmail.com> 2010-02-02 08:42:21 PST --- how about in/with Xen4, instead? or, any clarity as to why it's NOT made available in opensuse -- unlike other distros -- would be helpful. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=569741 http://bugzilla.novell.com/show_bug.cgi?id=569741#c3 James Fehlig <jfehlig@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW Info Provider|jfehlig@novell.com | --- Comment #3 from James Fehlig <jfehlig@novell.com> 2010-02-02 19:17:24 UTC --- It comes down to time. We don't have enough of it :-(. We would like to get pvgrub packaged but in reality it might not happen until later 11.3 milestones. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=569741 http://bugzilla.novell.com/show_bug.cgi?id=569741#c4 Torsten Duwe <duwe@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |DUPLICATE Severity|Major |Critical --- Comment #4 from Torsten Duwe <duwe@novell.com> 2010-02-11 14:29:45 UTC --- looks like this was reported before. *** This bug has been marked as a duplicate of bug 474789 *** http://bugzilla.novell.com/show_bug.cgi?id=474789 -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply＠novell.com