| Reported on: | 20131002 |
|---|---|
| Published on: | 20131021 |
| Fixed on: | 20131021 |
| Reported by: | Daniel P. Berrange |
|---|---|
| Patched by: | Daniel P. Berrange |
The virConnectDomainXMLToNative API was mistakenly given the 'read' permission instead of the 'write' permission. The latter is required since the conversion process will trigger execution of user provided binaries whose path is listed in the XML.
An unprivileged user with the 'connect:read' permission could cause the libvirtd daemon to execute arbitrary binaries as root
Remove the 'connect:read' permission from untrusted users