WARNING - OLD ARCHIVES

This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
   
 
 
Xen 
 
Home Products Support Community News
 
   
 

xen-users

Re: [Xen-users] xen in hosting envoroment

On Sun, Feb 03, 2008 at 10:09:08AM +0000, Nico Kadel-Garcia wrote:
> That would be a *SERIOUS* bug, and if anyone knew of such, we'd be 
> reporting it pretty fast. There was a fascinating RHEL bug reported, in 
> the use of pygrub, because pygrub would read the grub contents from the 
> DomU at boot time and this created an interesting security risk for the 
> pygrub program itself.

what ever happened to this, anyhow?  did PyGrub start running fsck before 
it mounts the untrusted filesystems?  or was the solution to fix
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5497 
such that linux doesn't panic on corrupted filesystems?

Why wouldn't pygrub run fsck on it's target system anyhow?  I mean,
even if the user isn't being malicious, it's quite possible
that the partition in question was shut down improperly.  

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users

<Prev in Thread] Current Thread [Next in Thread>