Re: [libvirt] [PATCH] virlog: determine the hostname on startup CVE-2018-XXX

2018-02-12 Thread Daniel P . Berrangé
On Sat, Feb 10, 2018 at 07:06:22AM +0100, Michal Privoznik wrote: > On 02/07/2018 02:13 PM, Daniel P. Berrangé wrote: > > On Wed, Feb 07, 2018 at 09:58:21AM +0530, P J P wrote: > >> +-- On Mon, 5 Feb 2018, Daniel P. Berrangé wrote --+ > >> | From: Lubomir Rintel > >> | > >> | At later point it mi

Re: [libvirt] [PATCH] virlog: determine the hostname on startup CVE-2018-XXX

2018-02-09 Thread Michal Privoznik
On 02/07/2018 02:13 PM, Daniel P. Berrangé wrote: > On Wed, Feb 07, 2018 at 09:58:21AM +0530, P J P wrote: >> +-- On Mon, 5 Feb 2018, Daniel P. Berrangé wrote --+ >> | From: Lubomir Rintel >> | >> | At later point it might not be possible or even safe to use getaddrinfo(). >> It >> | can in turn

Re: [libvirt] [PATCH] virlog: determine the hostname on startup CVE-2018-XXX

2018-02-07 Thread P J P
+-- On Mon, 5 Feb 2018, Daniel P. Berrangé wrote --+ | From: Lubomir Rintel | | At later point it might not be possible or even safe to use getaddrinfo(). It | can in turn result in a load of NSS module. | | Notably, on a LXC container startup we may find ourselves with the guest | filesystem al

Re: [libvirt] [PATCH] virlog: determine the hostname on startup CVE-2018-XXX

2018-02-07 Thread Daniel P . Berrangé
On Wed, Feb 07, 2018 at 09:58:21AM +0530, P J P wrote: > +-- On Mon, 5 Feb 2018, Daniel P. Berrangé wrote --+ > | From: Lubomir Rintel > | > | At later point it might not be possible or even safe to use getaddrinfo(). > It > | can in turn result in a load of NSS module. > | > | Notably, on a LX

[libvirt] [PATCH] virlog: determine the hostname on startup CVE-2018-XXX

2018-02-05 Thread Daniel P . Berrangé
From: Lubomir Rintel At later point it might not be possible or even safe to use getaddrinfo(). It can in turn result in a load of NSS module. Notably, on a LXC container startup we may find ourselves with the guest filesystem already having replaced the host one. Loading a NSS module from the g