]> git.ipfire.org Git - thirdparty/libvirt.git/commit
projects / thirdparty / libvirt.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 8cf159f) | patch
api: disallow virDomainManagedSaveDefineXML on read-only connections
authorJán Tomko <jtomko@redhat.com>
Fri, 14 Jun 2019 07:14:53 +0000 (09:14 +0200)
committerJán Tomko <jtomko@redhat.com>
Mon, 24 Jun 2019 08:00:21 +0000 (10:00 +0200)
commite7d9c8899fc7751201b46b6cf6bff4eadb38af2f
treeff00905a64cbfdb6ac45258e759da3e6d391b108tree
parent8cf159fed436634a7607964eeecefee59be63b33commit | diff
api: disallow virDomainManagedSaveDefineXML on read-only connections

The virDomainManagedSaveDefineXML can be used to alter the domain's
config used for managedsave or even execute arbitrary emulator binaries.
Forbid it on read-only connections.

Fixes: CVE-2019-10166
Reported-by: Matthias Gerstner <mgerstner@suse.de>
Signed-off-by: Ján Tomko <jtomko@redhat.com>
Reviewed-by: Daniel P. Berrangé <berrange@redhat.com>
(cherry picked from commit db0b78457f183e4c7ac45bc94de86044a1e2056a)
Signed-off-by: Ján Tomko <jtomko@redhat.com>
src/libvirt-domain.c diff | blob | blame | history
Mirror of https://github.com/libvirt/libvirt.git