> This adds documentation for the previously added 'insecure-input' > parameter to -compat, which controls policy for insecure > configuration requests. > > Signed-off-by: Daniel P. Berrangé <[email protected]> > Message-ID: <[email protected]> > --- > qemu-options.hx | 22 +++++++++++++++++++++- > 1 file changed, 21 insertions(+), 1 deletion(-) > > diff --git a/qemu-options.hx b/qemu-options.hx > index 16d9c6c9072d..0487e74bb3e1 100644 > --- a/qemu-options.hx > +++ b/qemu-options.hx > @@ -4696,7 +4696,9 @@ DEF("compat", HAS_ARG, QEMU_OPTION_compat, > "-compat > [deprecated-input=accept|reject|crash|warn][,deprecated-output=accept|hide]\n" > " Policy for handling deprecated management interfaces\n" > "-compat > [unstable-input=accept|reject|crash|warn][,unstable-output=accept|hide]\n" > - " Policy for handling unstable management interfaces\n", > + " Policy for handling unstable management interfaces\n" > + "-compat [insecure-input=accept|reject|crash|warn]\n" > + " Policy for handling requests for insecure configuration > requests\n",
"Policy for handling insecure configuration requests"? > QEMU_ARCH_ALL) > SRST > ``-compat > [deprecated-input=<input-policy>][,deprecated-output=<output-policy>]`` > @@ -4734,6 +4736,24 @@ SRST > Suppress unstable command results and events > > Limitation: covers only syntactic aspects of QMP. > + > +``-compat [insecure-input=<input-policy>] Missing closing `` > + Set policy for handling requests for insecure configuration > + requests: > + > + ``insecure-input=accept`` (default) > + Accept insecure configurations requests silently > + ``insecure-input=warn`` > + Accept insecure configuration requests with warning on stderr > + ``insecure-input=reject`` > + Reject insecure configuration requests > + ``insecure-input=crash`` > + Crash on insecure configuration requests > + > + Limitation: an insecure configuration is one where QEMU has docs/system/security.rst still states that insecure-input "accepts three values" and lists only accept, warn and reject. Add missing 'crash'. > + not intended to provide a security boundary to protect against does not intend -- Marc-André Lureau <[email protected]>
