Hi Matej amd g3blv,
This unfortunately was a security issue - see [1]
If you explcitly want it to be open to everyone you'd want to add a drop in 
config for the socket 

$ systemctl edit libvirtd.socket 
SocketMode=0666

Then you are back to how it was before, but unsecured as documented by
the CVE (it is fine if you opt in to that, but for the general user base
we have to keep it secure).

Subscribing Marc in case there is a discussion about this setting.

[1]: https://people.canonical.com/~ubuntu-
security/cve/2020/CVE-2020-15708.html

** Changed in: libvirt (Ubuntu)
       Status: New => Won't Fix

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2020-15708

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1891311

Title:
  New version of libvirt-sock has wrong permissions

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1891311/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to