api: disallow virConnect*HypervisorCPU on read-only connections
These APIs can be used to execute arbitrary emulators. Forbid them on read-only connections. Fixes: CVE-2019-10168 Signed-off-by: NJán Tomko <jtomko@redhat.com> Reviewed-by: NDaniel P. Berrangé <berrange@redhat.com>
Showing
-
mentioned in commit 09c2635d
-
mentioned in commit a6116fc8
-
mentioned in commit 415cc5c0
-
mentioned in commit 890965e8
-
mentioned in commit f5ace9c0
-
mentioned in commit fc30929f
-
mentioned in commit dd88b69a
-
mentioned in commit 1ef98539
-
mentioned in commit 2a3f95a4
-
mentioned in commit 45ae5e52
-
mentioned in commit d8e4d134
想要评论请 注册 或 登录