From mboxrd@z Thu Jan 1 00:00:00 1970 From: Paolo Bonzini Subject: Re: PING^7 (was Re: [PATCH v2 00/14] Corrections and customization of the SG_IO command whitelist (CVE-2012-4542)) Date: Wed, 22 May 2013 22:36:51 +0200 Message-ID: <519D2C63.7020002@redhat.com> References: <20130522100212.GE3466@mtj.dyndns.org> <519C9CBC.3050003@redhat.com> <20130522134134.GA15189@mtj.dyndns.org> <519CD234.40608@redhat.com> <20130522150335.GC2777@thunk.org> <519CE9FE.2030007@redhat.com> <519CF99E.6010804@redhat.com> <20130522181135.GC20848@thunk.org> <519D1E92.7030505@redhat.com> <20130522201957.GD20848@thunk.org> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <20130522201957.GD20848@thunk.org> Sender: linux-kernel-owner@vger.kernel.org To: Theodore Ts'o , "Martin K. Petersen" , Tejun Heo , "James E.J. Bottomley" , Jens Axboe , linux-kernel@vger.kernel.org, linux-scsi@vger.kernel.org List-Id: linux-scsi@vger.kernel.org Il 22/05/2013 22:19, Theodore Ts'o ha scritto: > On Wed, May 22, 2013 at 09:37:54PM +0200, Paolo Bonzini wrote: >>> If it's not theoretical, how does the cloud service control who has >>> access to the CD burner, and how are the disks loaded into the CD >>> burner? >> >> CD burning would be used in a VM that runs on your local workstation, so >> the VM gets access to the CD burner under your desk. There was also a >> developer of a CD burning tool that wanted to test it inside BSD, >> Solaris and Windows VMs; the idea is the same. > > So in both cases all of the VM's and the host OS are within the same > trust boundary. This simplifies the security requirements than in the > more generic cloud server caser where the VM's are mutually > suspicious. This simplifies the requirements of what we need to push > into the kernel, yes? What do you mean by "push into the kernel"? (Anyway the CD burner case is really the only one that the current whitelist covers completely. I was just listing it as a use case for SG_IO in the context as virtualization). Paolo