api: disallow virConnect*HypervisorCPU on read-only connections
These APIs can be used to execute arbitrary emulators. Forbid them on read-only connections. Fixes: CVE-2019-10168 Signed-off-by: NJán Tomko <jtomko@redhat.com> Reviewed-by: NDaniel P. Berrangé <berrange@redhat.com> (cherry picked from commit bf6c2830) Signed-off-by: NJán Tomko <jtomko@redhat.com>
Showing
想要评论请 注册 或 登录