This adds documentation for the previously added 'insecure-input' parameter to -compat, which controls policy for insecure configuration requests.
Signed-off-by: Daniel P. Berrangé <[email protected]> --- qemu-options.hx | 22 +++++++++++++++++++++- 1 file changed, 21 insertions(+), 1 deletion(-) diff --git a/qemu-options.hx b/qemu-options.hx index 16d9c6c9072..0487e74bb3e 100644 --- a/qemu-options.hx +++ b/qemu-options.hx @@ -4696,7 +4696,9 @@ DEF("compat", HAS_ARG, QEMU_OPTION_compat, "-compat [deprecated-input=accept|reject|crash|warn][,deprecated-output=accept|hide]\n" " Policy for handling deprecated management interfaces\n" "-compat [unstable-input=accept|reject|crash|warn][,unstable-output=accept|hide]\n" - " Policy for handling unstable management interfaces\n", + " Policy for handling unstable management interfaces\n" + "-compat [insecure-input=accept|reject|crash|warn]\n" + " Policy for handling requests for insecure configuration requests\n", QEMU_ARCH_ALL) SRST ``-compat [deprecated-input=<input-policy>][,deprecated-output=<output-policy>]`` @@ -4734,6 +4736,24 @@ SRST Suppress unstable command results and events Limitation: covers only syntactic aspects of QMP. + +``-compat [insecure-input=<input-policy>] + Set policy for handling requests for insecure configuration + requests: + + ``insecure-input=accept`` (default) + Accept insecure configurations requests silently + ``insecure-input=warn`` + Accept insecure configuration requests with warning on stderr + ``insecure-input=reject`` + Reject insecure configuration requests + ``insecure-input=crash`` + Crash on insecure configuration requests + + Limitation: an insecure configuration is one where QEMU has + not intended to provide a security boundary to protect against + malicious usage. Covers only QOM types for devices, machine types + and accelerators. ERST DEF("fw_cfg", HAS_ARG, QEMU_OPTION_fwcfg, -- 2.56.0
