forge/qports
1
0
Fork 0
Code Issues 6 Pull requests 1 Projects Releases Packages 35 Wiki Activity Actions

[r4.2] qubes-db-vm: add xen_privcmd modprobe config #388

Merged
forge merged 1 commit from qubes-db-vm/fix-xen-privcmd-42 into r4.2 2026-05-12 01:15:26 +00:00
Conversation 0 Commits 1 Files changed 2 +11 -1
forge commented 2026-05-12 01:09:27 +00:00
Owner
Copy link

XSA-482 patch modified behavior of /dev/xen/privcmd, to disallow most
operations. This breaks vchan which uses xc_evtchn_status() (not
available via /dev/xen/evtchn yet).
Until proper abstraction via /dev/xen/evtchn is available, lift the
limitation via kernel parameter.

Unfortunately, the usual cmdline 'xen_privcmd.unrestrictedused in other OSs does not work on Alpine Linux. We need to setxen_privcmd.unrestricted=1`. Thus, set via modprobe conf

XSA-482 patch modified behavior of /dev/xen/privcmd, to disallow most operations. This breaks vchan which uses xc_evtchn_status() (not available via /dev/xen/evtchn yet). Until proper abstraction via /dev/xen/evtchn is available, lift the limitation via kernel parameter. Unfortunately, the usual cmdline 'xen_privcmd.unrestricted` used in other OSs does not work on Alpine Linux. We need to set `xen_privcmd.unrestricted=1`. Thus, set via modprobe conf
qubes-db-vm: add xen_privcmd modprobe config
All checks were successful
/ build-edge (pull_request) Successful in 1m32s
Details
/ build-v3.23 (pull_request) Successful in 1m31s
Details
/ build-v3.22 (pull_request) Successful in 1m50s
Details
/ lint (pull_request) Successful in 28s
Details
/ deploy-edge (pull_request) Successful in 31s
Details
/ deploy-v3.23 (pull_request) Successful in 31s
Details
/ deploy-v3.22 (pull_request) Successful in 32s
Details
e918e22393
 
XSA-482 patch modified behavior of /dev/xen/privcmd, to disallow most
operations. This breaks vchan which uses xc_evtchn_status() (not
available via /dev/xen/evtchn yet).
Until proper abstraction via /dev/xen/evtchn is available, lift the
limitation via kernel parameter.

Unfortunately, the usual cmdline 'xen_privcmd.unrestricted` used in
other OSs does not work on Alpine Linux. We need to set
`xen_privcmd.unrestricted=1`. Thus, set via modprobe conf
forge merged commit e918e22393 into r4.2 2026-05-12 01:15:26 +00:00
forge deleted branch qubes-db-vm/fix-xen-privcmd-42 2026-05-12 01:15:27 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
r4.2

   
r4.3

   
r4.4
No labels
r4.2
r4.3
r4.4
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
forge/qports!388
No description provided.