]> git.ipfire.org Git - thirdparty/libvirt.git/commit
conf: report an error if nic needs filtering by no driver is present
authorDaniel P. Berrangé <berrange@redhat.com>
Thu, 26 Apr 2018 13:05:10 +0000 (14:05 +0100)
committerDaniel P. Berrangé <berrange@redhat.com>
Tue, 26 Jun 2018 10:22:07 +0000 (11:22 +0100)
commitc0fa7713b8b62090a835c26b7067c0187280f3b3
treee0b73c341197327e7ae4357927816d0ed03a79b7
parentfca9afa08428f65011c6f64ce1e99028ac043b57
conf: report an error if nic needs filtering by no driver is present

If a <interface> includes a filter name but the nwfilter driver is not
present we silently do nothing. This is very bad, because an application
that thinks it is protected by malicious guest traffic will in fact be
vulnerable. Reporting an error gives the administrator the ability to
know there is a problem and fix it.

Reviewed-by: John Ferlan <jferlan@redhat.com>
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
src/conf/domain_nwfilter.c