mirror of
https://gitlab.com/libvirt/libvirt.git
synced 2024-07-11 12:25:52 +00:00
4feeb2d986
The virt-login-shell binary is a setuid program that takes no arguments. When invoked it looks at the invoking uid, resolves it to a username, and finds an LXC guest with the same name. It then starts the guest and runs the shell in side the namespaces of the container. Given this set of tasks the virt-login-shell binary needs to connect to libvirtd, make various other libvirt API calls. This is a problem for setuid binaries as various libraries that libvirt.so links to are not safe. For example, they have constructor functions which execute an unknown amount of code that can be influenced by env variables. For this reason virt-login-shell doesn't use libvirt.so, but instead links to a custom, cut down, set of source files sufficient to be a local client only. This introduces a problem for integrating glib2 into libvirt though, as once integrated, there would be no way to build virt-login-shell without an external dependancy on glib2 and this is definitely not setuid safe. To resolve this problem, we split the virt-login-shell binary into two parts. The first part is setuid and does almost nothing. It simply records the original uid+gid, and then invokes the virt-login-shell-helper binary. Crucially when it does this it completes scrubs all environment variables. It is thus safe for virt-login-shell-helper to link to the normal libvirt.so. Any things that constructor functions do cannot be influenced by user control env vars or cli args. Reviewed-by: Michal Privoznik <mprivozn@redhat.com> Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
214 lines
3.9 KiB
Plaintext
214 lines
3.9 KiB
Plaintext
*#*#
|
|
*.#*#
|
|
*.[187]
|
|
*.[187].in
|
|
*.a
|
|
*.cov
|
|
*.exe
|
|
*.exe.manifest
|
|
*.gcda
|
|
*.gcno
|
|
*.gcov
|
|
*.html
|
|
*.i
|
|
*.la
|
|
*.lo
|
|
*.loT
|
|
*.o
|
|
*.orig
|
|
*.pem
|
|
*.pyc
|
|
*.rej
|
|
*.s
|
|
*.service
|
|
*.socket
|
|
*.swp
|
|
*~
|
|
.#*
|
|
.color_coded
|
|
.deps
|
|
.dirstamp
|
|
.gdb_history
|
|
.git
|
|
.git-module-status
|
|
.libs
|
|
.lvimrc
|
|
.memdump
|
|
.sc-start-sc_*
|
|
.ycm_extra_conf.py
|
|
/AUTHORS
|
|
/GNUmakefile
|
|
/INSTALL
|
|
/NEWS
|
|
/aclocal.m4
|
|
/autom4te.cache
|
|
/build-aux/*
|
|
/build/
|
|
/ci-tree/
|
|
/confdefs.h
|
|
/config.cache
|
|
/config.guess
|
|
/config.h
|
|
/config.h.in
|
|
/config.log
|
|
/config.rpath
|
|
/config.status
|
|
/config.sub
|
|
/configure
|
|
/configure.lineno
|
|
/conftest.*
|
|
/docs/aclperms.htmlinc
|
|
/docs/apibuild.py.stamp
|
|
/docs/devhelp/libvirt.devhelp
|
|
/docs/hvsupport.html.in
|
|
/docs/libvirt-admin-*.xml
|
|
/docs/libvirt-api.xml
|
|
/docs/libvirt-lxc-*.xml
|
|
/docs/libvirt-qemu-*.xml
|
|
/docs/libvirt-refs.xml
|
|
/docs/news.html.in
|
|
/docs/todo.html.in
|
|
/examples/c/admin/client_close
|
|
/examples/c/admin/client_info
|
|
/examples/c/admin/client_limits
|
|
/examples/c/admin/list_clients
|
|
/examples/c/admin/list_servers
|
|
/examples/c/admin/logging
|
|
/examples/c/admin/threadpool_params
|
|
/examples/c/domain/dommigrate
|
|
/examples/c/domain/domtop
|
|
/examples/c/domain/info1
|
|
/examples/c/domain/rename
|
|
/examples/c/domain/suspend
|
|
/examples/c/misc/event-test
|
|
/examples/c/misc/hellolibvirt
|
|
/examples/c/misc/openauth
|
|
/gnulib/lib/*
|
|
/gnulib/m4/*
|
|
/gnulib/tests/*
|
|
/include/libvirt/libvirt-common.h
|
|
/libtool
|
|
/libvirt-*.tar.xz
|
|
/libvirt-[0-9]*
|
|
/libvirt*.pc
|
|
/libvirt.spec
|
|
/ltconfig
|
|
/ltmain.sh
|
|
/m4/*
|
|
/maint.mk
|
|
/mingw-libvirt.spec
|
|
/mkinstalldirs
|
|
/po/*gmo
|
|
/po/*po
|
|
!/po/*.mini.po
|
|
/po/*pot
|
|
/proxy/
|
|
/python/
|
|
/run
|
|
/sc_*
|
|
/src/.*.stamp
|
|
/src/*.pc
|
|
/src/access/org.libvirt.api.policy
|
|
/src/access/viraccessapicheck.c
|
|
/src/access/viraccessapicheck.h
|
|
/src/access/viraccessapichecklxc.c
|
|
/src/access/viraccessapichecklxc.h
|
|
/src/access/viraccessapicheckqemu.c
|
|
/src/access/viraccessapicheckqemu.h
|
|
/src/admin/admin_client.h
|
|
/src/admin/admin_protocol.[ch]
|
|
/src/admin/admin_server_dispatch_stubs.h
|
|
/src/esx/*.generated.*
|
|
/src/hyperv/*.generated.*
|
|
/src/libvirt*.def
|
|
/src/libvirt.syms
|
|
/src/libvirt_access.syms
|
|
/src/libvirt_access.xml
|
|
/src/libvirt_access_lxc.syms
|
|
/src/libvirt_access_lxc.xml
|
|
/src/libvirt_access_qemu.syms
|
|
/src/libvirt_access_qemu.xml
|
|
/src/libvirt_admin.syms
|
|
/src/libvirt_*.stp
|
|
/src/libvirt_*helper
|
|
/src/libvirt_*probes.h
|
|
/src/libvirt_lxc
|
|
/src/libvirtd
|
|
/src/libvirtd*.logrotate
|
|
/src/locking/libxl-lockd.conf
|
|
/src/locking/libxl-sanlock.conf
|
|
/src/locking/lock_daemon_dispatch_stubs.h
|
|
/src/locking/lock_protocol.[ch]
|
|
/src/locking/qemu-lockd.conf
|
|
/src/locking/qemu-sanlock.conf
|
|
/src/locking/test_libvirt_sanlock.aug
|
|
/src/logging/log_daemon_dispatch_stubs.h
|
|
/src/logging/log_protocol.[ch]
|
|
/src/lxc/lxc_controller_dispatch.h
|
|
/src/lxc/lxc_monitor_dispatch.h
|
|
/src/lxc/lxc_monitor_protocol.c
|
|
/src/lxc/lxc_monitor_protocol.h
|
|
/src/lxc/lxc_protocol.[ch]
|
|
/src/lxc/test_libvirtd_lxc.aug
|
|
/src/qemu/test_libvirtd_qemu.aug
|
|
/src/remote/*_client_bodies.h
|
|
/src/remote/*_protocol.[ch]
|
|
/src/remote/*_stubs.h
|
|
/src/rpc/virkeepaliveprotocol.[ch]
|
|
/src/rpc/virnetprotocol.[ch]
|
|
/src/test_libvirt*.aug
|
|
/src/test_virtlockd.aug
|
|
/src/test_virtlogd.aug
|
|
/src/util/virkeycodetable*.h
|
|
/src/util/virkeynametable*.h
|
|
/src/virt-aa-helper
|
|
/src/virtlockd
|
|
/src/virtlogd
|
|
/src/virt-guest-shutdown.target
|
|
/tests/*.log
|
|
/tests/*.pid
|
|
/tests/*.trs
|
|
/tests/*test
|
|
/tests/commandhelper
|
|
/tests/qemucapsprobe
|
|
!/tests/virsh-self-test
|
|
!/tests/virt-aa-helper-test
|
|
!/tests/virt-admin-self-test
|
|
/tests/objectlocking
|
|
/tests/objectlocking-files.txt
|
|
/tests/objectlocking.cm[ix]
|
|
/tests/reconnect
|
|
/tests/ssh
|
|
/tests/test_file_access.txt
|
|
/tests/test_conf
|
|
/tools/libvirt-guests.sh
|
|
/tools/virt-login-shell
|
|
/tools/virt-login-shell-helper
|
|
/tools/virsh
|
|
/tools/virsh-*-edit.c
|
|
/tools/virt-admin
|
|
/tools/virt-*-validate
|
|
/tools/virt-sanlock-cleanup
|
|
/tools/wireshark/src/libvirt
|
|
/update.log
|
|
GPATH
|
|
GRTAGS
|
|
GTAGS
|
|
Makefile
|
|
Makefile.in
|
|
TAGS
|
|
coverage
|
|
cscope.files
|
|
cscope.in.out
|
|
cscope.out
|
|
cscope.po.out
|
|
results.log
|
|
stamp-h
|
|
stamp-h.in
|
|
stamp-h1
|
|
tags
|
|
!/build-aux/*.pl
|
|
!/gnulib/lib/Makefile.am
|
|
!/gnulib/tests/Makefile.am
|
|
!/m4/virt-*.m4
|