From mboxrd@z Thu Jan 1 00:00:00 1970 From: Markus Armbruster Subject: Re: [PATCH] ioemu: Disable format auto-probing in monitor command change Date: Wed, 18 Jun 2008 13:36:18 +0200 Message-ID: <87iqw7j7pp.fsf@pike.pond.sub.org> References: <200805081800.24064.turkay.eren@gmail.com> <18467.12572.126574.502777@mariner.uk.xensource.com> <20080508171255.GA31908@redhat.com> <18467.13858.203078.97403@mariner.uk.xensource.com> <20080508172304.GB31908@redhat.com> <18467.14318.921215.768838@mariner.uk.xensource.com> <20080508173023.GC31908@redhat.com> <18468.29633.937355.26121@mariner.uk.xensource.com> <18473.52451.967004.377867@mariner.uk.xensource.com> <8763sw9nfx.fsf@pike.pond.sub.org> <18496.793.632548.533855@mariner.uk.xensource.com> <18514.36535.961030.856448@mariner.uk.xensource.com> <87tzfto0ep.fsf@pike.pond.sub.org> <18518.35502.522506.191854@mariner.uk.xensource.com> <87prqhnxoi.fsf@pike.pond.sub.org> <18518.39663.74413.329755@mariner.uk.xensource.com> <878wx4knf6.fsf_-_@pike.pond.sub.org> <18520.57849.817605.160590@mariner.uk.xensource.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Return-path: In-Reply-To: <18520.57849.817605.160590@mariner.uk.xensource.com> (Ian Jackson's message of "Wed\, 18 Jun 2008 11\:22\:49 +0100") List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: xen-devel-bounces@lists.xensource.com Errors-To: xen-devel-bounces@lists.xensource.com To: Ian Jackson Cc: Eren =?utf-8?Q?T=C3=BCrkay?= , xen-devel@lists.xensource.com List-Id: xen-devel@lists.xenproject.org Ian Jackson writes: > Markus Armbruster writes ("[Xen-devel] [PATCH] ioemu: Disable format auto-probing in monitor command change"): >> Format auto-probing of writable images is a security hole. The last >> known remaining instance is monitor command change. Disable probing >> there and use raw. This breaks change for images in all other >> formats. >> >> Signed-off-by: Markus Armbruster > > For the avoidance of any doubt, re Markus's patch: > Acked-By: Ian Jackson > > But this should be applied together with the patch I posted earlier, Yes. > which I assume Markus is also now happy with. So here is that one Yes. > again for your comfort and convenience. > > Signed-off-by: Ian Jackson Acked-by: Markus Armbruster