libvirt/src/util
Eric Blake aebbcdd33c CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC shutdown/reboot code
Use helper virProcessRunInMountNamespace in lxcDomainShutdownFlags and
lxcDomainReboot.  Otherwise, a malicious guest could use symlinks
to force the host to manipulate the wrong file in the host's namespace.

Idea by Dan Berrange, based on an initial report by Reco
<recoverym4n@gmail.com> at
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=732394

Signed-off-by: Eric Blake <eblake@redhat.com>
2014-02-18 12:59:02 +00:00
..
iohelper.c Adapt to VIR_ALLOC and virAsprintf in src/util/* 2013-07-10 11:07:33 +02:00
keymaps.csv
viralloc.c Fix reporting of errors in OOM injection code 2013-09-24 10:52:26 +01:00
viralloc.h viralloc.h: Fix typo in VIR_APPEND_ELEMENT_COPY_QUIT 2013-10-18 15:50:31 +02:00
virarch.c Add support for detecting PPC little endian arches 2013-10-16 12:40:35 +01:00
virarch.h Add support for detecting PPC little endian arches 2013-10-16 12:40:35 +01:00
viratomic.c
viratomic.h
viraudit.c virutil: Move string related functions to virstring.c 2013-05-02 16:56:55 +02:00
viraudit.h
virauth.c Remove all direct use of getenv 2013-10-21 14:03:52 +01:00
virauth.h virAuth: Don't require virConnectPtr to retrieve authentication creds 2013-07-12 09:22:38 +02:00
virauthconfig.c Adapt to VIR_ALLOC and virAsprintf in src/util/* 2013-07-10 11:07:33 +02:00
virauthconfig.h
virbitmap.c virBitmapParse: Fix behavior in case of error and fix up callers 2013-08-22 11:38:36 +02:00
virbitmap.h
virbuffer.c maint: avoid 'const fooPtr' in several util files 2013-10-14 13:02:18 -06:00
virbuffer.h maint: avoid 'const fooPtr' in several util files 2013-10-14 13:02:18 -06:00
vircgroup.c blkio: Setting throttle blkio cgroup for domain 2014-01-20 10:52:44 +08:00
vircgroup.h blkio: Setting throttle blkio cgroup for domain 2014-01-20 10:52:44 +08:00
vircgrouppriv.h
virclosecallbacks.c lxc: switch to virCloseCallbacks API 2013-07-18 14:16:54 +02:00
virclosecallbacks.h lxc: switch to virCloseCallbacks API 2013-07-18 14:16:54 +02:00
vircommand.c virCommand: Introduce virCommandSetDryRun 2014-01-29 18:01:36 +01:00
vircommand.h virCommand: Introduce virCommandSetDryRun 2014-01-29 18:01:36 +01:00
virconf.c Improve virConf parse to handle LXC config format 2014-02-12 17:52:46 +00:00
virconf.h Improve virConf parse to handle LXC config format 2014-02-12 17:52:46 +00:00
virdbus.c Fixed build with clang. 2014-02-12 06:36:17 -07:00
virdbus.h Add a method for closing the dbus system bus connection 2013-10-14 10:31:01 +01:00
virdbuspriv.h Introduce virDBusCallMethod & virDBusMessageRead methods 2013-07-22 13:09:58 +01:00
virdnsmasq.c Convert 'int i' to 'size_t i' in src/util/ files 2013-07-10 17:40:13 +01:00
virdnsmasq.h
virebtables.c maint: avoid 'const fooPtr' in several util files 2013-10-14 13:02:18 -06:00
virebtables.h maint: avoid 'const fooPtr' in several util files 2013-10-14 13:02:18 -06:00
virendian.h
virerror.c maint: improve VIR_ERR_OPERATION_DENIED usage 2014-01-06 08:29:29 -07:00
virerror.h maint: improve VIR_ERR_OPERATION_DENIED usage 2014-01-06 08:29:29 -07:00
virevent.c event: improve public API docs 2014-01-02 07:29:54 -07:00
virevent.h
vireventpoll.c event: Make debug message match function comments 2013-09-27 11:16:35 -05:00
vireventpoll.h
virfile.c Add virFileMakeParentPath helper function 2014-02-18 12:39:06 +00:00
virfile.h Add virFileMakeParentPath helper function 2014-02-18 12:39:06 +00:00
virhash.c maint: avoid 'const fooPtr' in hashes 2013-10-14 11:40:24 -06:00
virhash.h maint: avoid 'const fooPtr' in hashes 2013-10-14 11:40:24 -06:00
virhashcode.c
virhashcode.h
virhook.c Convert 'int i' to 'size_t i' in src/util/ files 2013-07-10 17:40:13 +01:00
virhook.h virutil: Move string related functions to virstring.c 2013-05-02 16:56:55 +02:00
viridentity.c Remove (nearly) all use of getuid()/getgid() 2013-10-21 14:03:52 +01:00
viridentity.h Also store user & group ID values in virIdentity 2013-09-18 15:04:27 +01:00
virinitctl.c CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC shutdown/reboot code 2014-02-18 12:59:02 +00:00
virinitctl.h CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC shutdown/reboot code 2014-02-18 12:59:02 +00:00
viriptables.c Fix bridge configuration when OUTPUT policy is DROP on the host 2014-01-07 18:18:29 +01:00
viriptables.h Fix bridge configuration when OUTPUT policy is DROP on the host 2014-01-07 18:18:29 +01:00
virjson.c Remove redundant braces 2013-11-20 12:35:47 +01:00
virjson.h json: support removing a value from an object 2013-05-13 15:15:54 -06:00
virkeycode-mapgen.py virkeycode: Allow ANSI_A 2013-12-24 17:36:47 +01:00
virkeycode.c virkeycode: Allow ANSI_A 2013-12-24 17:36:47 +01:00
virkeycode.h
virkeyfile.c Adapt to VIR_ALLOC and virAsprintf in src/util/* 2013-07-10 11:07:33 +02:00
virkeyfile.h
virkmod.c utils: Introduce functions for kernel module manipulation 2014-02-04 08:52:27 -05:00
virkmod.h utils: Introduce functions for kernel module manipulation 2014-02-04 08:52:27 -05:00
virlockspace.c Fix leak in virLockSpaceResourceFree 2013-09-25 18:12:09 +01:00
virlockspace.h
virlog.c maint: align whitespaces with project conventions. 2014-01-20 14:35:08 +01:00
virlog.h Convert 'int i' to 'size_t i' in src/util/ files 2013-07-10 17:40:13 +01:00
virmacaddr.c maint: avoid 'const fooPtr' in several util files 2013-10-14 13:02:18 -06:00
virmacaddr.h maint: avoid 'const fooPtr' in several util files 2013-10-14 13:02:18 -06:00
virnetdev.c build: correctly check for SOICGIFVLAN GET_VLAN_VID_CMD command 2014-02-11 01:43:38 +02:00
virnetdev.h util: use size_t instead of unsigned int for num_virtual_functions 2013-11-08 14:31:11 +02:00
virnetdevbandwidth.c Revert "networkAllocateActualDevice: Set QoS for bridgeless networks too" 2014-01-29 19:01:19 +01:00
virnetdevbandwidth.h Revert "networkAllocateActualDevice: Set QoS for bridgeless networks too" 2014-01-29 19:01:19 +01:00
virnetdevbridge.c build: fix build with latest rawhide kernel headers 2013-09-16 09:24:12 -06:00
virnetdevbridge.h
virnetdevmacvlan.c maint: fix comma style issues: util 2013-11-20 09:14:55 -07:00
virnetdevmacvlan.h maint: avoid 'const fooPtr' in virnet files 2013-10-14 13:05:34 -06:00
virnetdevopenvswitch.c maint: avoid 'const fooPtr' in virnet files 2013-10-14 13:05:34 -06:00
virnetdevopenvswitch.h maint: avoid 'const fooPtr' in virnet files 2013-10-14 13:05:34 -06:00
virnetdevtap.c maint: avoid 'const fooPtr' in virnet files 2013-10-14 13:05:34 -06:00
virnetdevtap.h maint: avoid 'const fooPtr' in virnet files 2013-10-14 13:05:34 -06:00
virnetdevveth.c Free cmd in virNetDevVethCreate 2013-10-04 12:03:19 +01:00
virnetdevveth.h
virnetdevvlan.c maint: avoid 'const fooPtr' in virnet files 2013-10-14 13:05:34 -06:00
virnetdevvlan.h maint: avoid 'const fooPtr' in virnet files 2013-10-14 13:05:34 -06:00
virnetdevvportprofile.c maint: fix comma style issues: util 2013-11-20 09:14:55 -07:00
virnetdevvportprofile.h maint: avoid 'const fooPtr' in virnet files 2013-10-14 13:05:34 -06:00
virnetlink.c maint: fix comma style issues: util 2013-11-20 09:14:55 -07:00
virnetlink.h maint: avoid 'const fooPtr' in virnet files 2013-10-14 13:05:34 -06:00
virnodesuspend.c Separate internal node suspend APIs from public API 2013-05-08 10:47:47 +01:00
virnodesuspend.h Separate internal node suspend APIs from public API 2013-05-08 10:47:47 +01:00
virnuma.c util: Correct the NUMA node range checking 2014-01-23 13:19:56 +08:00
virnuma.h numa: Add wrapper of numa_node_to_cpus and use it 2013-11-04 10:50:20 +01:00
virobject.c object: require maximal alignment in base class 2013-12-13 05:59:38 -07:00
virobject.h object: require maximal alignment in base class 2013-12-13 05:59:38 -07:00
virpci.c virpci: Resolve coverity issues 2014-02-07 10:58:24 -05:00
virpci.h virpci: Resolve coverity issues 2014-02-07 10:58:24 -05:00
virpidfile.c virutil: Move string related functions to virstring.c 2013-05-02 16:56:55 +02:00
virpidfile.h
virportallocator.c Support IPv6 in port allocator 2014-02-14 13:18:35 +01:00
virportallocator.h Add a name to virPortAllocator 2013-11-18 12:28:02 +01:00
virprocess.c Add helper for running code in separate namespaces 2014-02-18 12:45:41 +00:00
virprocess.h Add helper for running code in separate namespaces 2014-02-18 12:45:41 +00:00
virrandom.c Remove all direct use of getenv 2013-10-21 14:03:52 +01:00
virrandom.h
virscsi.c util: Accept test data path for scsi device's sg_path 2014-01-30 16:34:43 +01:00
virscsi.h util: Add one argument for several scsi utils 2014-01-30 15:48:28 +08:00
virsexpr.c Adapt to VIR_ALLOC and virAsprintf in src/util/* 2013-07-10 11:07:33 +02:00
virsexpr.h
virsocketaddr.c maint: avoid 'const fooPtr' in several util files 2013-10-14 13:02:18 -06:00
virsocketaddr.h maint: avoid 'const fooPtr' in several util files 2013-10-14 13:02:18 -06:00
virstatslinux.c virutil: Move string related functions to virstring.c 2013-05-02 16:56:55 +02:00
virstatslinux.h
virstoragefile.c storage: always probe type with buffer 2013-11-06 17:31:51 -07:00
virstoragefile.h storage: always probe type with buffer 2013-11-06 17:31:51 -07:00
virstring.c Introduce standard methods for sorting strings with qsort 2013-11-28 11:29:46 +00:00
virstring.h Introduce standard methods for sorting strings with qsort 2013-11-28 11:29:46 +00:00
virsysinfo.c Use AC_PATH_PROG to search for dmidecode 2014-01-20 09:34:53 -07:00
virsysinfo.h
virsystemd.c Don't ignore all dbus connection errors 2013-10-14 10:33:10 +01:00
virsystemd.h LXC: workaround machined uncleaned data with containers running systemd. 2013-09-30 16:47:23 +01:00
virthread.c Remove windows thread implementation in favour of pthreads 2014-01-30 18:00:20 +00:00
virthread.h Remove windows thread implementation in favour of pthreads 2014-01-30 18:00:20 +00:00
virthreadpool.c virThreadPoolFree: Set n(Prio)Workers after the pool is locked 2013-12-05 15:52:23 +01:00
virthreadpool.h
virtime.c Adapt to VIR_ALLOC and virAsprintf in src/util/* 2013-07-10 11:07:33 +02:00
virtime.h
virtpm.c Adapt to VIR_ALLOC and virAsprintf in src/util/* 2013-07-10 11:07:33 +02:00
virtpm.h
virtypedparam.c maint: avoid nested public calls 2014-01-04 07:13:09 -07:00
virtypedparam.h Introduce virTypedParamsCopy internal API 2013-06-25 00:38:25 +02:00
viruri.c Convert 'int i' to 'size_t i' in src/util/ files 2013-07-10 17:40:13 +01:00
viruri.h
virusb.c util: Use new array management macros 2014-01-08 23:00:34 +08:00
virusb.h util: Use new array management macros 2014-01-08 23:00:34 +08:00
virutil.c storage: Fix the memory leak 2014-01-23 21:39:05 +08:00
virutil.h build: fix build on mingw with winpthreads 2014-01-13 09:14:11 -07:00
viruuid.c Convert 'int i' to 'size_t i' in src/util/ files 2013-07-10 17:40:13 +01:00
viruuid.h maint: improve debug of libvirt-{qemu,lxc} apis 2014-01-02 22:17:11 -07:00
virxml.c Fix possible memory leak in util/virxml.c 2014-01-15 11:11:34 +01:00
virxml.h conf: allow to add XML metadata using the virDomainSetMetadata api 2013-09-17 09:42:49 +02:00