[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Qemu-devel] [PATCH RFC v3 17/27] COLO: Add new command parameter 'c

From: zhanghailiang
Subject: Re: [Qemu-devel] [PATCH RFC v3 17/27] COLO: Add new command parameter 'colo_nicname' 'colo_script' for net
Date: Wed, 25 Feb 2015 16:21:15 +0800
User-agent: Mozilla/5.0 (Windows NT 6.1; rv:31.0) Gecko/20100101 Thunderbird/31.1.1

On 2015/2/25 1:24, Daniel P. Berrange wrote:
On Tue, Feb 24, 2015 at 09:30:56AM -0700, Eric Blake wrote:
On 02/24/2015 02:50 AM, Wen Congyang wrote:
Script files are in general very hard to secure.  Libvirt marks any
domain that uses a script file for controlling networking as tainted,
because it cannot guarantee that the script did not do arbitrary
actions.  Can you come up with any better solution that does not require
a script file, such as having management software responsible for
passing in an already-opened fd?

Do you mean that opening the script in libvirt?

No, I mean a solution that needs no script file at all.  Have libvirt
pre-open the TAP device you will need, then pass in the fd that will be
used for the colo NIC.

Agreed, we really must not add new features that require executing
arbitrary blackbox shell scripts to QEMU, when we know that reslts in
a flawed security model. And just pushing the script execution upto
libvirt is not really a satisfactory solution either.

Hmm, this script is mainly used for controlling net packet forward by using tc
command and setting iptable rules for colo by using iptables command.
Is there any API for linux iptables and tc (traffic control) ?


reply via email to

[Prev in Thread] Current Thread [Next in Thread]