Re: [PATCH 00/14] Improve mechanism for configuring allowed commands

2024-07-15 Thread Daniel P . Berrangé
On Mon, Jul 15, 2024 at 11:52:10AM +0200, Markus Armbruster wrote: > Hi Daniel, got a public branch I could pull? This particular v1 posting: https://gitlab.com/berrange/qemu/-/tags/qga-features-v1 Or latest git master rebase https://gitlab.com/berrange/qemu/-/tree/qga-features NB, this

Re: [PATCH 00/14] Improve mechanism for configuring allowed commands

2024-07-15 Thread Markus Armbruster
Hi Daniel, got a public branch I could pull?

Re: [PATCH 00/14] Improve mechanism for configuring allowed commands

2024-07-02 Thread Daniel P . Berrangé
Ping: any review comments from QGA maintainers ? On Tue, Jun 04, 2024 at 04:32:28PM +0100, Daniel P. Berrangé wrote: > The QGA supports dynamically filtering what commands are enabled via a > combination of allow lists and deny lists. This is very flexible, but > at the same time very fragile. >

[PATCH 00/14] Improve mechanism for configuring allowed commands

2024-06-04 Thread Daniel P . Berrangé
The QGA supports dynamically filtering what commands are enabled via a combination of allow lists and deny lists. This is very flexible, but at the same time very fragile. Consider that a user wants to block all commands that allow unrestricted file access/command execution, so they set the deny l