]> xenbits.xensource.com Git - libvirt.git/commit
projects / libvirt.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: aed6a03) | patch
api: disallow virDomainManagedSaveDefineXML on read-only connections
authorJán Tomko <jtomko@redhat.com>
Fri, 14 Jun 2019 07:14:53 +0000 (09:14 +0200)
committerJán Tomko <jtomko@redhat.com>
Thu, 20 Jun 2019 11:50:56 +0000 (13:50 +0200)
commitdb0b78457f183e4c7ac45bc94de86044a1e2056a
tree2ef2a9eb1ef005680f2057cb2875188d8013eaaatree
parentaed6a032cead4386472afb24b16196579e239580commit | diff
api: disallow virDomainManagedSaveDefineXML on read-only connections

The virDomainManagedSaveDefineXML can be used to alter the domain's
config used for managedsave or even execute arbitrary emulator binaries.
Forbid it on read-only connections.

Fixes: CVE-2019-10166
Reported-by: Matthias Gerstner <mgerstner@suse.de>
Signed-off-by: Ján Tomko <jtomko@redhat.com>
Reviewed-by: Daniel P. Berrangé <berrange@redhat.com>
src/libvirt-domain.c diff | blob | blame | history
Unnamed repository; edit this file 'description' to name the repository.