drakrun: Update recommended Xen flags

CERT-Polska · May 11, 2021 · 968d261 · 968d261
1 parent 9d3c096
commit 968d261
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 3 deletions.
diff --git a/drakrun/drakrun/main.py b/drakrun/drakrun/main.py
@@ -685,10 +685,11 @@ def validate_xen_commandline():
     required_cmdline = {
         "sched": "credit",
         "force-ept": "1",
-        "ept": "pml=0",
+        "ept": "ad=0",
         "hap_1gb": "0",
         "hap_2mb": "0",
-        "altp2m": "1"
+        "altp2m": "1",
+        "hpet": "legacy-replacement",
     }
 
     parsed_xl_info = get_xl_info()

diff --git a/drakvuf b/drakvuf
+2 −2		.github/workflows/compile.yml
+2 −2		.github/workflows/container-compile.yml
+1 −1		package/extra/etc/default/grub.d/xen.cfg
+54 −16		src/libdrakvuf/drakvuf.c
+1 −0		src/libdrakvuf/libdrakvuf.h
+3 −0		src/libdrakvuf/linux.c
+1 −0		src/libdrakvuf/private.h
+40 −67		src/libdrakvuf/vmi.c
+1 −1		src/libdrakvuf/vmi.h
+4 −2		src/libdrakvuf/win.c
+2 −2		src/main.cpp
+4 −12		src/plugins/bsodmon/bsodmon.cpp
+10 −20		src/plugins/cpuidmon/cpuidmon.cpp
+7 −17		src/plugins/debugmon/debugmon.cpp
+5 −14		src/plugins/delaymon/delaymon.cpp
+4 −17		src/plugins/envmon/envmon.cpp
+6 −3		src/plugins/exploitmon/exploitmon.cpp
+1 −0		src/plugins/exploitmon/exploitmon.h
+8 −35		src/plugins/filedelete/filedelete.cpp
+22 −106		src/plugins/filetracer/linux.cpp
+17 −40		src/plugins/filetracer/win.cpp
+3 −0		src/plugins/filetracer/win_acl.cpp
+27 −42		src/plugins/memdump/memdump.cpp
+3 −16		src/plugins/objmon/objmon.cpp
+14 −28		src/plugins/poolmon/poolmon.cpp
+4 −14		src/plugins/windowmon/windowmon.cpp
+3 −3		src/xtf.c