Re: [Qemu-devel] [PATCH 0/7] ATAPI CDROM passthrough v5

[Anthony Liguori]

Carl-Daniel Hailfinger wrote:
> On 28.08.2009 22:21, Bique Alexandre wrote:
>   
> > On Wednesday 12 August 2009 17:18:13 Ian Jackson wrote:
> >   
> >     
> > > > Also, I think Paul and I both requested that fw upgrade not be
> > > > disabled by default.
> > > >       
> > > >         
> > > As previously discussed I think this is a mistake, but it's a decision
> > > for qemu upstream to make so I have changed this.
> > >     
> > >       
>
> Anyone up for writing a security advisory about this?\
>   

Eh?

If you do hardware passthrough, the guest can mess up the device.  This 
is always going to be true and it's a security problem IMHO to make the 
user think anything other than that.

Regards,

Anthony Liguori

> Regards,
> Carl-Daniel
>
>
>