[PATCH 0/2] qemu_process: Start QEMU for caps probing more robustly

Michal Privoznik mprivozn at redhat.com
Fri Feb 4 15:38:39 UTC 2022


I'm not going to lie, my true motive is to be able to have a very small
bash wrapper that spawns QEMU under valgrind, e.g. like this:

  #!/bin/bash
  exec /usr/bin/valgrind --tool=memcheck --leak-check=full \
                         --track-fds=yes --log-file=/tmp/valgrind_qemu.log \
                         qemu-system-x86_64 "$@"

But if a malicious user provides slightly different script (see 2/2)
then they can starve libvirt worker pool. Hence, we have two reasons for
merging these.

Michal Prívozník (2):
  qemu_process: Be nicer to killing QEMU when probing caps
  qemu_process: Start QEMU for caps probing more robustly

 src/qemu/qemu_process.c | 64 +++++++++++++++++++++++++++--------------
 src/qemu/qemu_process.h |  1 -
 2 files changed, 43 insertions(+), 22 deletions(-)

-- 
2.34.1




More information about the libvir-list mailing list