Re: [libvirt] security: the qemu agent command "guest-exec" may cause Insider Access

2017-08-28 Thread Peter Krempa
On Sat, Aug 26, 2017 at 01:05:46 +, Zhangbo (Oscar) wrote: > >On Fri, Aug 25, 2017 at 08:52:16 +, Zhangbo (Oscar) wrote: > >> >On Fri, Aug 25, 2017 at 06:45:18 +, Zhangbo (Oscar) wrote: [...] > >If you don't trust the host, don't use it. There's no protection from > >reading the memor

Re: [libvirt] security: the qemu agent command "guest-exec" may cause Insider Access

2017-08-27 Thread Michal Privoznik
On 08/25/2017 12:41 PM, Martin Kletzander wrote: > On Fri, Aug 25, 2017 at 10:29:03AM +, Zhangbo (Oscar) wrote: >>> >>> Host can read all of the guest's memory or mount the image and modify >>> the guest agent. Or even add their own communication program that can >>> do anything. >>> >> >> I g

Re: [libvirt] security: the qemu agent command "guest-exec" may cause Insider Access

2017-08-25 Thread Zhangbo (Oscar)
>>>Host can read all of the guest's memory or mount the image and modify >>>the guest agent. Or even add their own communication program that can >>>do anything. >>> >> >>I get your point now! :) Thanks a lot!! >> >>Further more, kvm seems not as secure as xen, because xen isolates dom0 and >dom

Re: [libvirt] security: the qemu agent command "guest-exec" may cause Insider Access

2017-08-25 Thread Zhangbo (Oscar)
>On Fri, Aug 25, 2017 at 08:52:16 +, Zhangbo (Oscar) wrote: >> >On Fri, Aug 25, 2017 at 06:45:18 +, Zhangbo (Oscar) wrote: > >[...] > >> >> The Administrator also can use other commands such as " >> >guest-file-open" that also cause Insider Access. >> >> >> >> So, how to avoid t

Re: [libvirt] security: the qemu agent command "guest-exec" may cause Insider Access

2017-08-25 Thread Martin Kletzander
On Fri, Aug 25, 2017 at 10:29:03AM +, Zhangbo (Oscar) wrote: Host can read all of the guest's memory or mount the image and modify the guest agent. Or even add their own communication program that can do anything. I get your point now! :) Thanks a lot!! Further more, kvm seems not as

Re: [libvirt] security: the qemu agent command "guest-exec" may cause Insider Access

2017-08-25 Thread Zhangbo (Oscar)
> >Host can read all of the guest's memory or mount the image and modify >the guest agent. Or even add their own communication program that can >do anything. > I get your point now! :) Thanks a lot!! Further more, kvm seems not as secure as xen, because xen isolates dom0 and domU well, The ad

Re: [libvirt] security: the qemu agent command "guest-exec" may cause Insider Access

2017-08-25 Thread Martin Kletzander
On Fri, Aug 25, 2017 at 08:59:54AM +, Zhangbo (Oscar) wrote: On Fri, Aug 25, 2017 at 06:45:18AM +, Zhangbo (Oscar) wrote: Hi all: The Host Administrator is capable of running any exec in guests via the qemu-ga command "guest-exec", eg: virsh qemu-agent-command test_guest '{

Re: [libvirt] security: the qemu agent command "guest-exec" may cause Insider Access

2017-08-25 Thread Zhangbo (Oscar)
>On Fri, Aug 25, 2017 at 06:45:18AM +, Zhangbo (Oscar) wrote: >>Hi all: >> The Host Administrator is capable of running any exec in guests via the >qemu-ga command "guest-exec", eg: >> >>virsh qemu-agent-command test_guest '{"execute": "guest-exec", >"arguments": {"path": "ifconfig"

Re: [libvirt] security: the qemu agent command "guest-exec" may cause Insider Access

2017-08-25 Thread Martin Kletzander
On Fri, Aug 25, 2017 at 06:45:18AM +, Zhangbo (Oscar) wrote: Hi all: The Host Administrator is capable of running any exec in guests via the qemu-ga command "guest-exec", eg: virsh qemu-agent-command test_guest '{"execute": "guest-exec", "arguments": {"path": "ifconfig", "arg":

Re: [libvirt] security: the qemu agent command "guest-exec" may cause Insider Access

2017-08-25 Thread Peter Krempa
On Fri, Aug 25, 2017 at 06:45:18 +, Zhangbo (Oscar) wrote: > Hi all: > The Host Administrator is capable of running any exec in guests via the > qemu-ga command "guest-exec", eg: > > virsh qemu-agent-command test_guest '{"execute": "guest-exec", > "arguments": {"path": "ifconfig

[libvirt] security: the qemu agent command "guest-exec" may cause Insider Access

2017-08-24 Thread Zhangbo (Oscar)
Hi all: The Host Administrator is capable of running any exec in guests via the qemu-ga command "guest-exec", eg: virsh qemu-agent-command test_guest '{"execute": "guest-exec", "arguments": {"path": "ifconfig", "arg": [ "eth1", "192.168.0.99" ],"capture-output": true } }' {"return"