]> git.ipfire.org Git - thirdparty/libvirt.git/commit
projects / thirdparty / libvirt.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 43808f3) | patch
admin: reject clients unless their UID matches the current UID
authorDaniel P. Berrangé <berrange@redhat.com>
Tue, 30 Apr 2019 16:26:13 +0000 (17:26 +0100)
committerDaniel P. Berrangé <berrange@redhat.com>
Tue, 21 May 2019 12:05:00 +0000 (13:05 +0100)
commit96f41cd765c9e525fe28ee5abbfbf4a79b3720c7
tree3c276566a9e46379eabb25ee61ae3e50e15d0acatree | snapshot
parent43808f3e9049eea42f1fcb094da8b2a966269570commit | diff
admin: reject clients unless their UID matches the current UID

The admin protocol RPC messages are only intended for use by the user
running the daemon. As such they should not be allowed for any client
UID that does not match the server UID.

Fixes CVE-2019-10132

Reviewed-by: Ján Tomko <jtomko@redhat.com>
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
src/admin/admin_server_dispatch.c diff | blob | blame | history
Mirror of https://github.com/libvirt/libvirt.git