Re: [Qemu-devel] [PATCH RFC 2/2] block: Warn on insecure format probing

[Stefan Hajnoczi]

On Thu, Oct 30, 2014 at 10:08:46AM +0100, Max Reitz wrote:
> Also, I like Kevin's proposal/Anthony's approach a lot more because of its
> principle. If a guest can overwrite the beginning of the image so it looks
> like an image format, that's the real bug. Afterwards, anyone will recognize
> that image as non-raw and they'd be correct.

No, it is not a guest bug.

The guest may legitimately use raw devices that contain image format
data.  Imagine tools similar to libguestfs.

It's perfectly okay for them to lay out image format data onto a raw
device.

Probing is the problem, not putting image format data onto a raw device.

Stefan

pgpqTPe2f9Xet.pgp
Description: PGP signature