diff options
| author | Christian Schoenebeck <qemu_oss@crudebyte.com> | 2023-06-26 13:49:06 +0200 |
|---|---|---|
| committer | Christian Schoenebeck <qemu_oss@crudebyte.com> | 2023-07-06 11:42:08 +0200 |
| commit | 71d72ececa086114df80fe4cc04d701b59002eb2 (patch) | |
| tree | 13d1c72b2f6bc3ca59c2ec293107a1e503c0d44c /docs/tools | |
| parent | 0618e72d64e434dd6f1bc38b107670474c49fb86 (diff) | |
| download | focaccia-qemu-71d72ececa086114df80fe4cc04d701b59002eb2.tar.gz focaccia-qemu-71d72ececa086114df80fe4cc04d701b59002eb2.zip | |
9pfs: deprecate 'proxy' backend
As recent CVE-2023-2861 (fixed by f6b0de53fb) once again showed, the 9p 'proxy' fs driver is in bad shape. Using the 'proxy' backend was already discouraged for safety reasons before and we recommended to use the 'local' backend (preferably in conjunction with its 'mapped' security model) instead, but now it is time to officially deprecate the 'proxy' backend. Signed-off-by: Christian Schoenebeck <qemu_oss@crudebyte.com> Reviewed-by: Greg Kurz <groug@kaod.org> Message-Id: <E1qDkmw-0007M1-8f@lizzy.crudebyte.com>
Diffstat (limited to 'docs/tools')
| -rw-r--r-- | docs/tools/virtfs-proxy-helper.rst | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/docs/tools/virtfs-proxy-helper.rst b/docs/tools/virtfs-proxy-helper.rst index 6cdeedf8e9..bd310ebb07 100644 --- a/docs/tools/virtfs-proxy-helper.rst +++ b/docs/tools/virtfs-proxy-helper.rst @@ -9,6 +9,9 @@ Synopsis Description ----------- +NOTE: The 9p 'proxy' backend is deprecated (since QEMU 8.1) and will be +removed, along with this daemon, in a future version of QEMU! + Pass-through security model in QEMU 9p server needs root privilege to do few file operations (like chown, chmod to any mode/uid:gid). There are two issues in pass-through security model: |