From: Chris PeBenito <pebenito@ieee.org>
To: Russell Coker <russell@coker.com.au>, selinux-refpolicy@vger.kernel.org
Subject: Re: virt_use_sysfs
Date: Sat, 18 Jul 2020 08:44:21 -0400 [thread overview]
Message-ID: <333e81e8-8e04-1ab0-2d15-fd9b2a540946@ieee.org> (raw)
In-Reply-To: <2061951.59CCVTTc8E@liv>
On 7/17/20 8:20 AM, Russell Coker wrote:
> Does it make sense to not have this enabled by default? Getting meminfo from
> sysfs seems like a very reasonable and useful thing for a virtualisation
> system to do. Not allowing that doesn't seem to give any benefit but does
> have potential for serious problems if things even work like that.
Perhaps the answer is to unconditionally allow reading of sysfs instead. Then
writes to sysfs would still be conditional and disabled by default.
--
Chris PeBenito
prev parent reply other threads:[~2020-07-18 12:44 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2020-07-17 12:20 virt_use_sysfs Russell Coker
2020-07-18 12:44 ` Chris PeBenito [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=333e81e8-8e04-1ab0-2d15-fd9b2a540946@ieee.org \
--to=pebenito@ieee.org \
--cc=russell@coker.com.au \
--cc=selinux-refpolicy@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).