]> git.ipfire.org Git - thirdparty/libvirt.git/commit
projects / thirdparty / libvirt.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 58f237d) | patch
api: disallow virConnect*HypervisorCPU on read-only connections v5.0-maint
authorJán Tomko <jtomko@redhat.com>
Fri, 14 Jun 2019 07:17:39 +0000 (09:17 +0200)
committerJán Tomko <jtomko@redhat.com>
Mon, 24 Jun 2019 07:46:12 +0000 (09:46 +0200)
commit1ef98539a655109480628c91feac48c3c69675ef
tree78a5f231f97c1493caf9a09a615cbd8b75dbddcftree
parent58f237d696310f3ac62e98b3b5e9cb98e13064e9commit | diff
api: disallow virConnect*HypervisorCPU on read-only connections

These APIs can be used to execute arbitrary emulators.
Forbid them on read-only connections.

Fixes: CVE-2019-10168
Signed-off-by: Ján Tomko <jtomko@redhat.com>
Reviewed-by: Daniel P. Berrangé <berrange@redhat.com>
(cherry picked from commit bf6c2830b6c338b1f5699b095df36f374777b291)
Signed-off-by: Ján Tomko <jtomko@redhat.com>
src/libvirt-host.c diff | blob | blame | history
Mirror of https://github.com/libvirt/libvirt.git