[Bug 231480] sysutils/grub2-bhyve: "(host)" filesystem is a potential security issue

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=231480

Conrad Meyer <cem at freebsd.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Assignee|ports-bugs at FreeBSD.org      |cem at freebsd.org
                 CC|cem at freebsd.org             |grehan at FreeBSD.org

--- Comment #3 from Conrad Meyer <cem at freebsd.org> ---
bhyveload(1) uses the '-h hostdir' flag for this.  This is similar to '-r host
-d hostdir' in grub-bhyve syntax; however, '-r host' is the default in
grub-bhyve.

'-h' is available in grub-bhyve, but I would avoid using it for anything other
than '--help'.

We could treat explicit '-r host' similar to explicit '-h hostdir' in
grub-bhyve.  That is, do not allow host filesystem access _at all_ unless '-r
host' was specifically provided as a parameter.  This would retain
compatibility with vm-bhyve's use of '-r host', while denying host filesystem
access by default.

Thoughts?  I'll propose a patch via github eventually but I view this as
orthogonal to the privdrop proposal above, and will wait until that is
resolved.

-- 
You are receiving this mail because:
You are the assignee for the bug.