]> git.ipfire.org Git - thirdparty/libvirt.git/commit
projects / thirdparty / libvirt.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: d238f13) | patch
api: disallow virConnect*HypervisorCPU on read-only connections v4.10-maint
authorJán Tomko <jtomko@redhat.com>
Fri, 14 Jun 2019 07:17:39 +0000 (09:17 +0200)
committerJán Tomko <jtomko@redhat.com>
Mon, 24 Jun 2019 07:54:13 +0000 (09:54 +0200)
commit09c2635d0deec198de0f250abc2958f2d1c09eaa
tree6b49538a78f1f1e5c48fcb739d6ab868b85389catree
parentd238f132e6e0432a42d3cdff4571730dae3a85ebcommit | diff
api: disallow virConnect*HypervisorCPU on read-only connections

These APIs can be used to execute arbitrary emulators.
Forbid them on read-only connections.

Fixes: CVE-2019-10168
Signed-off-by: Ján Tomko <jtomko@redhat.com>
Reviewed-by: Daniel P. Berrangé <berrange@redhat.com>
(cherry picked from commit bf6c2830b6c338b1f5699b095df36f374777b291)
Signed-off-by: Ján Tomko <jtomko@redhat.com>
src/libvirt-host.c diff | blob | blame | history
Mirror of https://github.com/libvirt/libvirt.git