Re: [Qemu-devel] [PATCH] monitor: Add whitelist support for QMP commands

[Markus Armbruster <armbru@redhat.com>]

Julia Suvorova via Qemu-devel <qemu-devel@nongnu.org> writes:

> The whitelist option allows to run a reduced monitor with a subset of
> QMP commands. This allows the monitor to run in secure mode, which is

For a value of "secure".  I'm not saying this can't be useful, just
tempering expecations.  I guess you intend to use this to restrict the
monitor to sufficiently harmless commands, such as commands that merely
return information without changing anything.  However, even such
commands can be abused for denial of service.  Whether that's an issue
depends on your use case.

> convenient for sending commands via the WebSocket monitor using the
> web UI. This is planned to be done on micro:bit board.
>
> The list of allowed commands should be written to a file, one per line.
> The command line will look like this:
>     -mon chardev_name,mode=control,whitelist=path_to_file
>
> Signed-off-by: Julia Suvorova <jusual@mail.ru>

Please describe your intended use case in more detail, and provide at
least a rough security analysis that includes the denial of service
aspect.