Currently, when dpdkvhostuser devices are created, they inherit whatever the
running umask and uid/gid of the vswitchd process. This leads to difficulties
when using vhost_user consumers (such as qemu).
This patch introduces two new database entries, 'vhost-sock-owner' to set the
ownership, and 'v
Hi Aaron,
I'm still a little bit nervous about calling chown on a (partially) user
controlled file name.
Before moving forward I wanted to discuss a couple of other options:
* Ansis (in CC) suggested using -runas parameter in qemu. This way qemu can
open the socket as root and drop privileges
Daniele Di Proietto writes:
> Hi Aaron,
>
> I'm still a little bit nervous about calling chown on a (partially)
> user controlled file name.
I agree, that always seems scary.
> Before moving forward I wanted to discuss a couple of other options:
>
> * Ansis (in CC) suggested using -runas parame
On Tue, May 24, 2016 at 4:10 PM, Aaron Conole wrote:
> Daniele Di Proietto writes:
>
> > Hi Aaron,
> >
> > I'm still a little bit nervous about calling chown on a (partially)
> > user controlled file name.
>
> I agree, that always seems scary.
>
> > Before moving forward I wanted to discuss a co
On Mon, May 30, 2016 at 12:29 AM, Christian Ehrhardt
wrote:
> On Tue, May 24, 2016 at 4:10 PM, Aaron Conole wrote:
>
>> Daniele Di Proietto writes:
>>
>> > Hi Aaron,
>> >
>> > I'm still a little bit nervous about calling chown on a (partially)
>> > user controlled file name.
>>
>> I agree, that
Christian Ehrhardt writes:
> On Tue, May 24, 2016 at 4:10 PM, Aaron Conole wrote:
>
>> Daniele Di Proietto writes:
>>
>> > Hi Aaron,
>> >
>> > I'm still a little bit nervous about calling chown on a (partially)
>> > user controlled file name.
>>
>> I agree, that always seems scary.
>>
>> > Befo
Aaron Conole writes:
> Christian Ehrhardt writes:
>
>> On Tue, May 24, 2016 at 4:10 PM, Aaron Conole wrote:
>>
>>> Daniele Di Proietto writes:
>>>
>>> > Hi Aaron,
>>> >
>>> > I'm still a little bit nervous about calling chown on a (partially)
>>> > user controlled file name.
>>>
>>> I agree, t
On 10 June 2016 at 10:51, Aaron Conole wrote:
> Aaron Conole writes:
>
> > Christian Ehrhardt writes:
> >
> >> On Tue, May 24, 2016 at 4:10 PM, Aaron Conole
> wrote:
> >>
> >>> Daniele Di Proietto writes:
> >>>
> >>> > Hi Aaron,
> >>> >
> >>> > I'm still a little bit nervous about calling cho
Ansis Atteka writes:
> On 10 June 2016 at 10:51, Aaron Conole wrote:
>
>
> Aaron Conole writes:
>
> > Christian Ehrhardt writes:
> >
> >> On Tue, May 24, 2016 at 4:10 PM, Aaron Conole wrote:
> >>
> >>> Daniele Di Proietto writes:
> >>>
> >>> > Hi Aaron,
> >>> >
> >>> > I'm still a
On 10/06/2016 10:51, "Aaron Conole" wrote:
>Aaron Conole writes:
>
>> Christian Ehrhardt writes:
>>
>>> On Tue, May 24, 2016 at 4:10 PM, Aaron Conole wrote:
>>>
Daniele Di Proietto writes:
> Hi Aaron,
>
> I'm still a little bit nervous about calling chown on a (p
Daniele Di Proietto writes:
> On 10/06/2016 10:51, "Aaron Conole" wrote:
>
>>Aaron Conole writes:
>>
>>> Christian Ehrhardt writes:
>>>
On Tue, May 24, 2016 at 4:10 PM, Aaron Conole wrote:
> Daniele Di Proietto writes:
>
> > Hi Aaron,
> >
> > I'm still a little
On 13 June 2016 at 14:36, Aaron Conole wrote:
> Daniele Di Proietto writes:
>
> > On 10/06/2016 10:51, "Aaron Conole" wrote:
> >
> >>Aaron Conole writes:
> >>
> >>> Christian Ehrhardt writes:
> >>>
> On Tue, May 24, 2016 at 4:10 PM, Aaron Conole
> wrote:
>
> > Daniele Di Proiet
On Mon, Jun 13, 2016 at 05:36:34PM -0400, Aaron Conole wrote:
> > If these limitations are unacceptable, I can see how we can use
> > chmod. After all, as you point out, it's probably better to do it
> > in OVS than in some script.
>
> I think fchmod and fchown may actually be the correct calls t
Ben Pfaff writes:
> On Mon, Jun 13, 2016 at 05:36:34PM -0400, Aaron Conole wrote:
>> > If these limitations are unacceptable, I can see how we can use
>> > chmod. After all, as you point out, it's probably better to do it
>> > in OVS than in some script.
>>
>> I think fchmod and fchown may actu
Aaron Conole writes:
> Daniele Di Proietto writes:
>
>> On 10/06/2016 10:51, "Aaron Conole" wrote:
>>
>>>Aaron Conole writes:
>>>
Christian Ehrhardt writes:
> On Tue, May 24, 2016 at 4:10 PM, Aaron Conole wrote:
>
>> Daniele Di Proietto writes:
>>
>> > Hi Aaron
On Wed, Jul 6, 2016 at 7:24 AM, Aaron Conole wrote:
> Aaron Conole writes:
>
>> Daniele Di Proietto writes:
>>
>>> On 10/06/2016 10:51, "Aaron Conole" wrote:
>>>
Aaron Conole writes:
> Christian Ehrhardt writes:
>
>> On Tue, May 24, 2016 at 4:10 PM, Aaron Conole wrote:
>
Ansis Atteka writes:
> On Wed, Jul 6, 2016 at 7:24 AM, Aaron Conole wrote:
>> Aaron Conole writes:
>>
>>> Daniele Di Proietto writes:
>>>
On 10/06/2016 10:51, "Aaron Conole" wrote:
>Aaron Conole writes:
>
>> Christian Ehrhardt writes:
>>
>>> On Tue, May 24, 201
On 06/07/2016 11:26, "Aaron Conole" wrote:
>Ansis Atteka writes:
>
>> On Wed, Jul 6, 2016 at 7:24 AM, Aaron Conole wrote:
>>> Aaron Conole writes:
>>>
Daniele Di Proietto writes:
> On 10/06/2016 10:51, "Aaron Conole" wrote:
>
>>Aaron Conole writes:
>>
>>>
Daniele Di Proietto writes:
> On 06/07/2016 11:26, "Aaron Conole" wrote:
>
>>Ansis Atteka writes:
>>
>>> On Wed, Jul 6, 2016 at 7:24 AM, Aaron Conole wrote:
Aaron Conole writes:
> Daniele Di Proietto writes:
>
>> On 10/06/2016 10:51, "Aaron Conole" wrote:
>>
>>
19 matches
Mail list logo