mirror of
https://github.com/xen-project/xen.git
synced 2026-10-28 02:01:24 +01:00
pygrub: security-supported only when run de-privileged
XSA-443 and XSA-497 addressed specific issues in specific file system
drivers (libfsimage) used by pygrub. Further issues were reported, and yet
more are to be expected. XSA-443 introduced a means to run pygrub de-
privileged. Only this mode of operation is security supported from now on.
This is XSA-508.
Signed-off-by: Jan Beulich <jbeulich@suse.com>
Reviewed-by: Juergen Gross <jgross@suse.com>
(cherry picked from commit 75f920bd47)
This commit is contained in:
Jan Beulich authored and Andrew Cooper committed
1 parent
195a09c971
commit
eb4905ec4e
1 file changed
+6
@@ -288,6 +288,12 @@ or itself will not be regarded a security issue.
|
||||
Status, untrusted driver domains: Supported, not security supported
|
||||
Status, Liveupdate: Not functional
|
||||
|
||||
## Guest boot loaders
|
||||
|
||||
### Pygrub
|
||||
|
||||
Status: Supported, security supported only when run de-privileged
|
||||
|
||||
## Toolstack/3rd party
|
||||
|
||||
### libvirt driver for xl
|
||||
|
||||