libvirt/docs/schemas
Eric Blake 4932ef4502 rng: restrict passthrough names to known-good files
There is some controversy[1] on the qemu list on whether qemu should
have ever allowed arbitrary file name passthrough, or whether it
should be restricted to JUST /dev/random and /dev/hwrng.  It is
always easier to add support for additional filenames than it is
to remove support for something once released, so this patch
restricts libvirt 1.0.3 (where the virtio-random backend was first
supported) to just the two uncontroversial names, letting us defer
to a later date any decision on whether supporting arbitrary files
makes sense. Additionally, since qemu 1.4 does NOT support
/dev/fdset/nnn fd passthrough for the backend, limiting to just
two known names means that we don't get tempted to try fd
passthrough where it won't work.

[1]https://lists.gnu.org/archive/html/qemu-devel/2013-03/threads.html#00023

* src/conf/domain_conf.c (virDomainRNGDefParseXML): Only allow
/dev/random and /dev/hwrng.
* docs/schemas/domaincommon.rng: Flag invalid files.
* docs/formatdomain.html.in (elementsRng): Document this.
* tests/qemuxml2argvdata/qemuxml2argv-virtio-rng-random.args:
Update test to match.
* tests/qemuxml2argvdata/qemuxml2argv-virtio-rng-random.xml:
Likewise.
2013-03-04 17:45:38 -07:00
..
basictypes.rng schema: Restrict mode to octal 2013-02-26 16:23:21 -07:00
capability.rng Update arch names in RNG schema to match virarch.c 2013-02-22 10:55:37 +00:00
domain.rng snapshot: update rng to support full domain in xml 2011-09-03 08:12:13 -06:00
domaincommon.rng rng: restrict passthrough names to known-good files 2013-03-04 17:45:38 -07:00
domainsnapshot.rng snapshot: new XML for external system checkpoint 2012-11-02 09:56:23 -06:00
interface.rng xml: Clean up schemas to use shared data types instead of local 2012-03-08 15:31:54 +01:00
Makefile.am snapshot: update rng to support full domain in xml 2011-09-03 08:12:13 -06:00
network.rng Revert "Add support for <option> tag in network config" 2013-02-27 10:55:24 -05:00
networkcommon.rng bandwidth: add new 'floor' attribute 2012-12-11 18:35:12 +01:00
nodedev.rng rng: Have colorful *.rng with editor 2013-01-23 23:03:17 +08:00
nwfilter.rng nwfilter: Add support for ipset 2012-05-21 06:26:34 -04:00
secret.rng Use a common xml type for ceph secret usage. 2011-10-28 16:01:14 -06:00
storageencryption.rng rng: Have colorful *.rng with editor 2013-01-23 23:03:17 +08:00
storagepool.rng schema: Restrict mode to octal 2013-02-26 16:23:21 -07:00
storagevol.rng schema: Restrict mode to octal 2013-02-26 16:23:21 -07:00