Re: [libvirt] 答复: security: the qemu agent command "guest-exec" may cause Insider Access

2017-08-25 Thread Peter Krempa
On Fri, Aug 25, 2017 at 08:52:16 +, Zhangbo (Oscar) wrote: > >On Fri, Aug 25, 2017 at 06:45:18 +, Zhangbo (Oscar) wrote: [...] > >> The Administrator also can use other commands such as " > >guest-file-open" that also cause Insider Access. > >> > >> So, how to avoid this

Re: [libvirt] 答复: security: the qemu agent command "guest-exec" may cause Insider Access

2017-08-25 Thread Martin Kletzander
On Fri, Aug 25, 2017 at 08:52:16AM +, Zhangbo (Oscar) wrote: On Fri, Aug 25, 2017 at 06:45:18 +, Zhangbo (Oscar) wrote: Hi all: The Host Administrator is capable of running any exec in guests via the qemu-ga command "guest-exec", eg: virsh qemu-agent-command test_guest

[libvirt] 答复: security: the qemu agent command "guest-exec" may cause Insider Access

2017-08-25 Thread Zhangbo (Oscar)
>On Fri, Aug 25, 2017 at 06:45:18 +, Zhangbo (Oscar) wrote: >> Hi all: >> The Host Administrator is capable of running any exec in guests via the >qemu-ga command "guest-exec", eg: >> >> virsh qemu-agent-command test_guest '{"execute": "guest-exec", >"arguments": {"path":