]> git.ipfire.org Git - thirdparty/libvirt.git/commit
projects / thirdparty / libvirt.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 4dd3a7d) | patch
CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC USB hotplug
authorDaniel P. Berrange <berrange@redhat.com>
Thu, 30 Jan 2014 16:34:19 +0000 (16:34 +0000)
committerDaniel P. Berrange <berrange@redhat.com>
Tue, 18 Feb 2014 12:59:07 +0000 (12:59 +0000)
commit7fba01c15c1f886b4235825692b4c13e88dd9f7b
tree1b33bad89eef51b103696c41217dcc2559728d63tree
parent4dd3a7d5bc44980135a1b11810ba9aeab42a4a59commit | diff
CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC USB hotplug

Rewrite lxcDomainAttachDeviceHostdevSubsysUSBLive function
to use the virProcessRunInMountNamespace helper. This avoids
risk of a malicious guest replacing /dev with a absolute
symlink, tricking the driver into changing the host OS
filesystem.

Signed-off-by: Daniel P. Berrange <berrange@redhat.com>
src/lxc/lxc_driver.c diff | blob | blame | history
Mirror of https://github.com/libvirt/libvirt.git