Re: [Qemu-devel] [PATCH] Security house-cleaning

[Renzo Davoli]

On Thu, Jun 17, 2004 at 04:07:20PM +0100, Gianni Tedesco wrote:
> Thats only worrisome from a security perspective if qemu was designed to
> run SUID, which I doubt that it is... Of course it's a bug and needs
> fixing though.

One of the main pros of Qemu (among the others) it that it has been
designed NOT to run SUID.
The only piece of code that need root access is tuntap networking.
This problem can be circunvented by:
- using sudo for tuntap
- using user net (a.k.a slirp)
- using vde.

renzo