Re: [ovs-dev] [PATCH] netdev-dpdk: Do not add vhost-user ports with '/' or '\' in name.

2016-02-23 Thread Daniele Di Proietto
Thanks for the review Flavio, I applied this to master and brach-2.5 On 22/02/2016 20:29, "Flavio Leitner" wrote: >On Mon, 22 Feb 2016 11:43:23 -0800 >Daniele Di Proietto wrote: > >> This check prevents an obvious way for a vhost-user socket to escape

Re: [ovs-dev] [PATCH] netdev-dpdk: Do not add vhost-user ports with '/' or '\' in name.

2016-02-22 Thread Flavio Leitner
On Mon, 22 Feb 2016 11:43:23 -0800 Daniele Di Proietto wrote: > This check prevents an obvious way for a vhost-user socket to escape the > intended directory. > > There might be other ways to escape the directory (none comes to mind at > the moment), but this is a

[ovs-dev] [PATCH] netdev-dpdk: Do not add vhost-user ports with '/' or '\' in name.

2016-02-22 Thread Daniele Di Proietto
This check prevents an obvious way for a vhost-user socket to escape the intended directory. There might be other ways to escape the directory (none comes to mind at the moment), but this is a problem that should be properly solved by mandatory access control. A similar check is done for a