On Sat, Nov 26, 2016 at 7:33 PM, Marek Marczykowski-Górecki
<[email protected]> wrote:
> Generally source VM name always come from trusted place - out of VM
> control. If you wrote it manually to qubes-clipboard.bin.source, well,
> that's also "trusted" place.

Yes, but trusted in no way implies bug free.

I may not be the only one to make this particular mistake in the
future, therefore a general mitigation sounds like a good idea to me.

> Anyway, this looks like a good idea to verify it and deny the call if
> there is no such VM.

Noted. Tracking here:
- https://github.com/QubesOS/qubes-issues/issues/2460
- https://github.com/QubesOS/qubes-issues/issues/2461

Feel free to assign those issues to me if you'd like. I will get to
them when I can.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-devel" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-devel/CABQWM_D3tbN6fN8puqD3efETTAOt9VDQFxiw-Po9UEUD%3DJDwtA%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to