Re: [Qemu-devel] [PATCH] virtio-blk: refuse SG_IO requests with scsi=off

2012-01-13 Thread Paolo Bonzini
On 01/05/2012 11:05 AM, Paolo Bonzini wrote: On 12/23/2011 03:39 PM, Paolo Bonzini wrote: QEMU does have a scsi option (to be used like -device virtio-blk-pci,drive=foo,scsi=off). However, it only masks the feature bit, and does not reject the command if a malicious guest disregards the feature

Re: [Qemu-devel] [PATCH] virtio-blk: refuse SG_IO requests with scsi=off

2012-01-13 Thread Anthony Liguori
On 12/23/2011 08:39 AM, Paolo Bonzini wrote: QEMU does have a scsi option (to be used like -device virtio-blk-pci,drive=foo,scsi=off). However, it only masks the feature bit, and does not reject the command if a malicious guest disregards the feature bits and issues a request. Without this

Re: [Qemu-devel] [PATCH] virtio-blk: refuse SG_IO requests with scsi=off

2012-01-05 Thread Paolo Bonzini
On 12/23/2011 03:39 PM, Paolo Bonzini wrote: QEMU does have a scsi option (to be used like -device virtio-blk-pci,drive=foo,scsi=off). However, it only masks the feature bit, and does not reject the command if a malicious guest disregards the feature bits and issues a request. Without this

Re: [Qemu-devel] [PATCH] virtio-blk: refuse SG_IO requests with scsi=off

2011-12-30 Thread Stefan Hajnoczi
On Fri, Dec 23, 2011 at 03:39:03PM +0100, Paolo Bonzini wrote: QEMU does have a scsi option (to be used like -device virtio-blk-pci,drive=foo,scsi=off). However, it only masks the feature bit, and does not reject the command if a malicious guest disregards the feature bits and issues a

[Qemu-devel] [PATCH] virtio-blk: refuse SG_IO requests with scsi=off

2011-12-23 Thread Paolo Bonzini
QEMU does have a scsi option (to be used like -device virtio-blk-pci,drive=foo,scsi=off). However, it only masks the feature bit, and does not reject the command if a malicious guest disregards the feature bits and issues a request. Without this patch, using scsi=off does not protect you from