]> git.ipfire.org Git - thirdparty/libvirt.git/commit
Only allow the UNIX transport in remote driver when setuid
authorDaniel P. Berrange <berrange@redhat.com>
Wed, 9 Oct 2013 10:44:50 +0000 (11:44 +0100)
committerDaniel P. Berrange <berrange@redhat.com>
Mon, 21 Oct 2013 13:03:52 +0000 (14:03 +0100)
commite22b0232c7b94aefaef87c52c4d626fa532fcce3
tree70dcab031d24779801c7f2632e4e1277a3f561c8
parent71b21f12bece1127b28b404f11f57b4c2d48983a
Only allow the UNIX transport in remote driver when setuid

We don't know enough about quality of external libraries used
for non-UNIX transports, nor do we want to spawn external
commands when setuid. Restrict to the bare minimum which is
UNIX transport for local usage. Users shouldn't need to be
running setuid if connecting to remote hypervisors in any
case.

Signed-off-by: Daniel P. Berrange <berrange@redhat.com>
src/libvirt.c
src/remote/remote_driver.c