]> git.ipfire.org Git - thirdparty/libvirt.git/commit
projects / thirdparty / libvirt.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 93edb0e) | patch
api: disallow virConnect*HypervisorCPU on read-only connections v4.6-maint
authorJán Tomko <jtomko@redhat.com>
Fri, 14 Jun 2019 07:17:39 +0000 (09:17 +0200)
committerJán Tomko <jtomko@redhat.com>
Mon, 24 Jun 2019 07:56:08 +0000 (09:56 +0200)
commit890965e8943a8837b41c3c6f366135ccfef48fb3
treead4c5e7ea35a1edc2e452b86ba090b652ff6f43dtree
parent93edb0ea630556569320de83d45b100718f1391fcommit | diff
api: disallow virConnect*HypervisorCPU on read-only connections

These APIs can be used to execute arbitrary emulators.
Forbid them on read-only connections.

Fixes: CVE-2019-10168
Signed-off-by: Ján Tomko <jtomko@redhat.com>
Reviewed-by: Daniel P. Berrangé <berrange@redhat.com>
(cherry picked from commit bf6c2830b6c338b1f5699b095df36f374777b291)
Signed-off-by: Ján Tomko <jtomko@redhat.com>
src/libvirt-host.c diff | blob | blame | history
Mirror of https://github.com/libvirt/libvirt.git