Reference in a new issue

Blame

Copy permalink

Reference in a new issue

Copy permalink

Sean Christopherson e62b3b7969 KVM: Reject device ioctls from processes other than the VM's creator ... commit ddba91801a upstream. KVM's API requires thats ioctls must be issued from the same process that created the VM. In other words, userspace can play games with a VM's file descriptors, e.g. fork(), SCM_RIGHTS, etc..., but only the creator can do anything useful. Explicitly reject device ioctls that are issued by a process other than the VM's creator, and update KVM's API documentation to extend its requirements to device ioctls. Fixes: 852b6d57dc ("kvm: add device control API") Signed-off-by: Sean Christopherson <sean.j.christopherson@intel.com> Signed-off-by: Paolo Bonzini <pbonzini@redhat.com> Signed-off-by: Ben Hutchings <ben@decadent.org.uk>		History 2019-08-13 12:38:56 +01:00
..
devices	KVM: s390: Exploiting generic userspace interface for cmma	2014-04-22 13:24:32 +02:00
00-INDEX	Documentation/: update 00-INDEX files	2014-02-10 16:01:40 -08:00
api.txt	KVM: Reject device ioctls from processes other than the VM's creator	2019-08-13 12:38:56 +01:00
cpuid.txt	Documentation/kvm: Update cpuid documentation for steal time and pv eoi	2013-09-24 19:12:16 +02:00
hypercalls.txt	KVM: doc: Fix typo in doc/virtual/kvm	2013-12-31 17:24:54 -02:00
locking.txt	KVM: doc: Fix typo in doc/virtual/kvm	2013-12-31 17:24:54 -02:00
mmu.txt	KVM: MMU: fix SMAP virtualization	2015-06-02 12:08:13 +01:00
msr.txt	KVM: clarify kvmclock documentation	2012-09-17 14:10:23 -03:00
nested-vmx.txt	KVM: nVMX: Documentation	2011-07-12 13:15:22 +03:00
ppc-pv.txt	KVM: PPC: Disable NX for old magic page using guests	2014-05-30 14:26:24 +02:00
review-checklist.txt	Correct occurrences of	2011-05-06 09:27:55 -07:00
s390-diag.txt	KVM: s390: add documentation for diag 501	2014-04-22 13:24:51 +02:00
timekeeping.txt	KVM: doc: Fix typo in doc/virtual/kvm	2013-12-31 17:24:54 -02:00