Prasad J Pandit 27461d69a0 ppc: add host-serial and host-model machine attributes (CVE-2019-8934) ...

On ppc hosts, hypervisor shares following system attributes

  - /proc/device-tree/system-id
  - /proc/device-tree/model

with a guest. This could lead to information leakage and misuse.[*]
Add machine attributes to control such system information exposure
to a guest.

[*] https://wiki.openstack.org/wiki/OSSN/OSSN-0028

Reported-by: Daniel P. Berrangé <berrange@redhat.com>
Fix-suggested-by: Daniel P. Berrangé <berrange@redhat.com>
Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org>
Message-Id: <20190218181349.23885-1-ppandit@redhat.com>
Reviewed-by: Daniel P. Berrangé <berrange@redhat.com>
Reviewed-by: Greg Kurz <groug@kaod.org>
Signed-off-by: David Gibson <david@gibson.dropbear.id.au>

2019-02-26 09:21:25 +11:00

..

block

bdrv_query_image_info Error parameter added

2019-02-11 14:35:43 -06:00

chardev

char: move SpiceChardev and open_spice_port() to spice.h header

2019-02-21 14:09:17 +01:00

crypto

Don't talk about the LGPL if the file is licensed under the GPL

2019-01-30 10:51:20 +01:00

disas

target/mips: Add disassembler support for nanoMIPS

2018-10-25 22:13:33 +02:00

exec

include/exec/helper-head.h: support "const void *" in helper calls

2019-02-21 10:22:24 -08:00

fpu

include/fpu/softfloat: Fix compilation with Clang on s390x

2019-01-22 20:48:24 +00:00

hw

ppc: add host-serial and host-model machine attributes (CVE-2019-8934)

2019-02-26 09:21:25 +11:00

io

io: add qio_task_wait_thread to join with a background thread

2019-02-12 17:35:56 +01:00

libdecnumber

…

migration

vmstate: constify SaveVMHandlers

2019-01-23 15:51:47 +00:00

monitor

monitor: Remove "x-oob", offer capability "oob" unconditionally

2018-12-12 10:28:27 +01:00

net

slirp: improve send_packet() callback

2019-02-07 15:49:08 +02:00

qapi

qapi: remove qmp_unregister_command()

2019-02-18 14:44:05 +01:00

qemu

slirp: replace global polling with per-instance & notifier

2019-02-07 15:49:08 +02:00

qom

arm: Clarify the logic of set_pc()

2019-02-01 14:55:46 +00:00

scsi

avoid TABs in files that only contain a few

2019-01-11 15:46:56 +01:00

standard-headers

Merge remote-tracking branch 'remotes/bonzini/tags/for-upstream' into staging

2019-02-05 19:39:22 +00:00

sysemu

qapi: make query-cpu-definitions depend on specific targets

2019-02-18 14:44:05 +01:00

ui

spice: set device address and device display ID in QXL interface

2019-02-21 10:15:26 +01:00

elf.h

pvh: Boot uncompressed kernel using direct boot ABI

2019-02-05 16:50:16 +01:00

glib-compat.h

slirp: Move g_spawn_async_with_fds_qemu compatibility to slirp/

2019-02-07 15:49:08 +02:00

qemu-common.h

qemu-common.h: Update copyright string for 2019

2019-02-06 15:45:23 +01:00

qemu-io.h

qemu-io: Let command functions return error code

2018-06-11 16:18:45 +02:00

trace-tcg.h

…