Re: [libvirt] [PATCH 0/7] Improve performance of polkit checks

2014-09-12 Thread Michal Privoznik
On 10.09.2014 16:20, Daniel P. Berrange wrote: This series improves the performance of the polkit driver by switching from use of the pk-check command, to the DBus APIs. As a convenient side effect, this means we are no longer vulnerable to CVE-2013-4311, on any polkit version, since we no longer

[libvirt] [PATCH 0/7] Improve performance of polkit checks

2014-09-10 Thread Daniel P. Berrange
This series improves the performance of the polkit driver by switching from use of the pk-check command, to the DBus APIs. As a convenient side effect, this means we are no longer vulnerable to CVE-2013-4311, on any polkit version, since we no longer need pk-check (which is what had the flaw). In