From: "Daniel P. Berrange" <berrange@redhat.com>
To: Ian Jackson <Ian.Jackson@eu.citrix.com>
Cc: xen-devel@lists.xensource.com
Subject: Re: [PATCH] disable lomount and miniterm by default
Date: Wed, 16 Jan 2008 17:11:31 +0000 [thread overview]
Message-ID: <20080116171131.GC27604@redhat.com> (raw)
In-Reply-To: <18318.14444.387687.996933@mariner.uk.xensource.com>
On Wed, Jan 16, 2008 at 05:01:32PM +0000, Ian Jackson wrote:
Content-Description: message body text
> lomount is a tool which reads and parses a partition table in a disk
> image block device and then uses mount -o ...offset=... to mount it.
> This is not an ideal approach. For example, if the intended
> filesystem has corrupted metadata the kernel's filesystem driver may
> start to write outside of the intended region. This might even be
> exploitable in some perverse circumstances.
>
> Nowadays people wanting to do this should use kpartx, which uses
> devmapper to create appropriate range mappings. So lomount should be
> disabled.
+1 for this.
> miniterm may well be useful but it is a clone-and-hack of an upstream
> project and is currently built but not installed by default, partly
> because it doesn't make sense to install on the dom0 which it might be
> trying to debug.
Any idea of what the changes are wrt to upstream ? If they're useful
we should try and get them upstream.
While on the subject of tools, I'm puzelled why Xen has created custom tools
qcow-create, qcow2raw and img2qcow, when they are less functional than
the existing 'qemu-img' tool that comes as part of the QEMU codebase
Dan.
--
|=- Red Hat, Engineering, Emerging Technologies, Boston. +1 978 392 2496 -=|
|=- Perl modules: http://search.cpan.org/~danberr/ -=|
|=- Projects: http://freshmeat.net/~danielpb/ -=|
|=- GnuPG: 7D3B9505 F3C9 553F A1DA 4AC2 5648 23C1 B3DF F742 7D3B 9505 -=|
next prev parent reply other threads:[~2008-01-16 17:11 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2008-01-16 17:01 [PATCH] disable lomount and miniterm by default Ian Jackson
2008-01-16 17:11 ` Daniel P. Berrange [this message]
2008-01-17 16:12 ` Ian Jackson
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20080116171131.GC27604@redhat.com \
--to=berrange@redhat.com \
--cc=Ian.Jackson@eu.citrix.com \
--cc=xen-devel@lists.xensource.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.