[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Qemu-devel] [PATCH v4] ppc: add host-serial and host-model machine
From: |
David Gibson |
Subject: |
Re: [Qemu-devel] [PATCH v4] ppc: add host-serial and host-model machine attributes |
Date: |
Fri, 22 Feb 2019 09:30:17 +1100 |
User-agent: |
Mutt/1.10.1 (2018-07-13) |
On Thu, Feb 21, 2019 at 09:25:46AM +0000, Daniel P. Berrangé wrote:
> On Tue, Feb 19, 2019 at 01:55:01PM +1100, David Gibson wrote:
> > On Mon, Feb 18, 2019 at 11:43:49PM +0530, P J P wrote:
> > > From: Prasad J Pandit <address@hidden>
> > >
> > > On ppc hosts, hypervisor shares following system attributes
> > >
> > > - /proc/device-tree/system-id
> > > - /proc/device-tree/model
> > >
> > > with a guest. This could lead to information leakage and misuse.[*]
> > > Add machine attributes to control such system information exposure
> > > to a guest.
> > >
> > > [*] https://wiki.openstack.org/wiki/OSSN/OSSN-0028
> > >
> > > Reported-by: Daniel P. Berrangé <address@hidden>
> > > Fix-suggested-by: Daniel P. Berrangé <address@hidden>
> > > Signed-off-by: Prasad J Pandit <address@hidden>
> >
> > Applied to ppc-for-4.0, thanks.
>
> Could you add the word "CVE-2019-8934" to the commit message for this
> patch before sending a pulll request - either end of subject line, or
> just before the Reported-by line.
Done, thanks.
--
David Gibson | I'll have my music baroque, and my code
david AT gibson.dropbear.id.au | minimalist, thank you. NOT _the_ _other_
| _way_ _around_!
http://www.ozlabs.org/~dgibson
signature.asc
Description: PGP signature