Sean Christopherson 9badc8549f KVM: Reject device ioctls from processes other than the VM's creator ... commit ddba91801a upstream. KVM's API requires thats ioctls must be issued from the same process that created the VM. In other words, userspace can play games with a VM's file descriptors, e.g. fork(), SCM_RIGHTS, etc..., but only the creator can do anything useful. Explicitly reject device ioctls that are issued by a process other than the VM's creator, and update KVM's API documentation to extend its requirements to device ioctls. Fixes: 852b6d57dc ("kvm: add device control API") Cc: <stable@vger.kernel.org> Signed-off-by: Sean Christopherson <sean.j.christopherson@intel.com> Signed-off-by: Paolo Bonzini <pbonzini@redhat.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2019-04-03 06:25:20 +02:00
..
kvm	KVM: Reject device ioctls from processes other than the VM's creator	2019-04-03 06:25:20 +02:00
uml	Documentation: Update path to sysrq.txt	2017-03-03 15:48:38 -07:00
00-INDEX	virtual: Documentation: simplify and generalize paravirt_ops.txt	2015-02-13 17:15:44 +10:30
paravirt_ops.txt	virtual: Documentation: simplify and generalize paravirt_ops.txt	2015-02-13 17:15:44 +10:30