TE
TechEcho
Home24h TopNewestBestAskShowJobs
GitHubTwitter
Home

TechEcho

A tech news platform built with Next.js, providing global tech news and discussions.

GitHubTwitter

Home

HomeNewestBestAskShowJobs

Resources

HackerNews APIOriginal HackerNewsNext.js

© 2025 TechEcho. All rights reserved.

QEMU: virtfs permits guest to access entire host filesystem

132 pointsby remxabout 8 years ago

7 comments

devicenullabout 8 years ago
The v9fs code has been a <i>major</i> source of bugs. Hopefully no one&#x27;s using that in production...<p><a href="https:&#x2F;&#x2F;www.cvedetails.com&#x2F;vulnerability-list.php?vendor_id=7506&amp;product_id=&amp;version_id=&amp;page=1&amp;hasexp=0&amp;opdos=0&amp;opec=0&amp;opov=0&amp;opcsrf=0&amp;opgpriv=0&amp;opsqli=0&amp;opxss=0&amp;opdirt=0&amp;opmemc=0&amp;ophttprs=0&amp;opbyp=0&amp;opfileinc=0&amp;opginf=0&amp;cvssscoremin=0&amp;cvssscoremax=0&amp;year=0&amp;month=0&amp;cweid=0&amp;order=1&amp;trc=159&amp;sha=6055b0330a499f6aed7620adb79dc0cc143e50bc" rel="nofollow">https:&#x2F;&#x2F;www.cvedetails.com&#x2F;vulnerability-list.php?vendor_id=...</a>
评论 #13759873 未加载
评论 #13754288 未加载
sofaofthedamnedabout 8 years ago
Virtfs is a cluster fuck. Using rsync over it creates hundreds of thousands of file handles that never close. Reported to Ubuntu months ago, nothing fixed. Red Hat had the better idea of going nowhere near it. Canonical produce so much shovelware that they don&#x27;t support, I won&#x27;t get bit by this again.<p><a href="https:&#x2F;&#x2F;bugs.launchpad.net&#x2F;qemu&#x2F;+bug&#x2F;1336794" rel="nofollow">https:&#x2F;&#x2F;bugs.launchpad.net&#x2F;qemu&#x2F;+bug&#x2F;1336794</a>
als0about 8 years ago
Yet another example where SELinux could have mitigated this effect.
评论 #13755295 未加载
评论 #13754971 未加载
评论 #13754918 未加载
gbrown_about 8 years ago
Semi hopping on the QEMU bashing train but recall Google ripped it out for GCE.<p><a href="https:&#x2F;&#x2F;cloudplatform.googleblog.com&#x2F;2017&#x2F;01&#x2F;7-ways-we-harden-our-KVM-hypervisor-at-Google-Cloud-security-in-plaintext.html" rel="nofollow">https:&#x2F;&#x2F;cloudplatform.googleblog.com&#x2F;2017&#x2F;01&#x2F;7-ways-we-harde...</a>
评论 #13754937 未加载
评论 #13754998 未加载
评论 #13754719 未加载
codebeakerabout 8 years ago
From the title I understood this was a feature that had arrived in QEMU, seems like it could have it&#x27;s place on development machines&#x2F;etc where the only reason you&#x27;re using a VM is to get access to some alt. architecture.
Endyabout 8 years ago
Um, silly question. Does this affect people using QEMU to run ReactOS, FreeDOS, and their proprietary counterparts to play old games and use old programs that don&#x27;t work as well in DOSBox?
评论 #13757062 未加载
评论 #13757324 未加载
f2fabout 8 years ago
well then, plan9 finally becomes useful for something!