From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from atuin.qyliss.net (localhost [IPv6:::1]) by atuin.qyliss.net (Postfix) with ESMTP id 976123DEE; Wed, 15 Jul 2026 19:01:51 +0000 (UTC) Received: by atuin.qyliss.net (Postfix, from userid 993) id D02F23DDC; Wed, 15 Jul 2026 19:01:47 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 4.0.1 (2024-03-26) on atuin.qyliss.net X-Spam-Level: X-Spam-Status: No, score=-0.8 required=3.0 tests=DKIM_SIGNED,DKIM_VALID, DKIM_VALID_AU,DMARC_MISSING,RCVD_IN_DNSWL_LOW,SPF_HELO_PASS autolearn=unavailable autolearn_force=no version=4.0.1 Received: from fout-b8-smtp.messagingengine.com (fout-b8-smtp.messagingengine.com [202.12.124.151]) by atuin.qyliss.net (Postfix) with ESMTPS id DF7303DDB for ; Wed, 15 Jul 2026 19:01:46 +0000 (UTC) Received: from phl-compute-07.internal (phl-compute-07.internal [10.202.2.47]) by mailfout.stl.internal (Postfix) with ESMTP id 9D0D11D0005A; Wed, 15 Jul 2026 15:01:45 -0400 (EDT) Received: from phl-frontend-03 ([10.202.2.162]) by phl-compute-07.internal (MEProxy); Wed, 15 Jul 2026 15:01:45 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=alyssa.is; h=cc :cc:content-type:content-type:date:date:from:from:in-reply-to :in-reply-to:message-id:mime-version:references:reply-to:subject :subject:to:to; s=fm1; t=1784142105; x=1784228505; bh=8ffezHwU+Y QyNfWXd67YlFZwGP3zN1z2pmqZMxOcyOs=; b=sHOobH1X7YL8A/yQGjH90zAqgs 0hmTs7gFV1iUYKI6IA2pxTN/S2/JU2TRylX9NlvVFf/we7tKtTwrowe5ooaVBY0b d5Iud6seoyvqskQfAnB2Y3jnu5fGXsmpdp7wJGhpNxnZKoq2XksRZjfu9R99ktVd 6bJgg+TIYVTJxHChJPMB+VZlvEkh5tHvQRinvx9U1ZvOLkrdu5rxgcQP575zVwNC rUTpNIuPPWdiK+hudJoL6gbKo5ilDFATc4mBQ4thS/hAFa8XjgFTLIkepzweSRcX kxqD0rPlKucKOIybHti0dXVlAtFSBLDAGPyP2+ZgBYWUjE6LSN0y8Qj5zf7g== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-type:content-type:date:date :feedback-id:feedback-id:from:from:in-reply-to:in-reply-to :message-id:mime-version:references:reply-to:subject:subject:to :to:x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm2; t= 1784142105; x=1784228505; bh=8ffezHwU+YQyNfWXd67YlFZwGP3zN1z2pmq ZMxOcyOs=; b=U5tnbHDU2bnO91T3DtLrFmJh5w4gh6h2JveliMKzLNOEkZQ8W9r 60MbQ3UzpQk7Nq67ytOcFgO/G4xJKiJzWZG5i/Me0OW2094XN6rHjmvIBnHSmAxW XxAgJqovbcX19wLeVyGyGqKwK4cXJcHuo6S4VORIEk+mIqdIanlFKj7ozkH8VgY+ AzEMWWNjg0P9j9eFE3IOVspRYJEM++DCyNk/a2ylwv5V8XRh9Jvv5SjY0qH95nm3 o7ZNmoi1QZT8AkxpoYQJ8iF+i8mRym5YZuwGZCBioRiYbC1CDyJUSF0X5ZhTbn/S exiW5gUZG45zqI59izgni11W7MPjfPpYh2A== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: dmFkZTE7e0T1jzfi96L9VQyaE3SUyJut6VlT9o+PM3LdlSYEF8FurrABo+ifAFrGfWJCfa 5SnaaNHODLSBvZAP44ju2G7OcctdebhP7U9THn+nddqrv2zV+I/ql+iomcDOKfQzJeOVUD wZcjYYN1LKUC79G1CPSJSDNOmhtaVFeutkUqMgVzqF76rR9b2i45/rVCjFGBlgMoncaLfj yp+7xtJTlEhyVc3ylVrDUNobs76k0HZ5JsUNzdlShsm0fFNqzN0MmI5kltxNq1seJ8uL4f 9tiGEwo/x6Ywckc9U56kY2iJ888vZH7k1QqPznEw7SFVvfFmvBkC18gl/jeTZy+D8sIFmq fJnOHF70jsdJX9RU3XZ/4Csr99b+kZuHzfwVTO0ZHEhSB/MX2QnQmOQ8WM3D2ijD4XMc6/ vsUwsrkDKTL01K3yyO8r9/GmnpY/bELumWA+T/1JyZSmyo8rWpCJTdw0zh7FUVwIB9ykjc Rw9lSDt8t1qadNdSNqwb/9MRsa8v2DOJe1ITfB1plltazaaiDwL5IEI5y//VSeEf/sM3YB IJ83HWEFaN/vJkbdTpYNlfZnugQ1QlWI8mC4c81oS6RD1F265lYWeA/Wd4wfFGnGuX5NTC 7XOmLhESib/daxbmELR8SKa5mutq0KYJ/D4A26DxztnawxC+VZb3r+gqyT9g X-ME-Proxy: Feedback-ID: i12284293:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Wed, 15 Jul 2026 15:01:44 -0400 (EDT) Received: by mbp.qyliss.net (Postfix, from userid 1000) id 4730B8955D6C; Wed, 15 Jul 2026 20:54:15 +0200 (CEST) From: Alyssa Ross To: Demi Marie Obenour Subject: Re: Why is /run/vm/by-id/${VM} writable by the VMM? In-Reply-To: <0d8076ca-dd4d-42c2-9806-0f78841ae397@gmail.com> References: <87ech71crf.fsf@alyssa.is> <0d8076ca-dd4d-42c2-9806-0f78841ae397@gmail.com> Date: Wed, 15 Jul 2026 20:54:13 +0200 Message-ID: <8733xkqe22.fsf@alyssa.is> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" Message-ID-Hash: ZWIC26WTIEE6PKD5OZF5S74DU4GVVCRC X-Message-ID-Hash: ZWIC26WTIEE6PKD5OZF5S74DU4GVVCRC X-MailFrom: hi@alyssa.is X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; header-match-devel.spectrum-os.org-0; header-match-devel.spectrum-os.org-1; header-match-devel.spectrum-os.org-2; header-match-devel.spectrum-os.org-3; header-match-devel.spectrum-os.org-4; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header CC: Spectrum OS Development X-Mailman-Version: 3.3.10 Precedence: list List-Id: Patches and low-level development discussion Archived-At: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: --=-=-= Content-Type: text/plain Content-Transfer-Encoding: quoted-printable Demi Marie Obenour writes: > On 7/13/26 05:04, Alyssa Ross wrote: >> Demi Marie Obenour writes: >>=20 >>> This seems to be a fairly significant hole in the VMM's sandbox. >>> Various code operates in that directory and isn't secure against >>> symlink attacks. >>> >>> Does the VMM really need write access to that directory? Could it >>> be given access to a subdirectory that is mounted "nosymfollow"? >>=20 >> I think it's just so it can create e.g. the serial file. That could >> indeed be moved to a subdirectory. The ideal solution is of course for >> Cloud Hypervisor to be able to accept every file it would otherwise >> create as an open file descriptor, which I expect will happen >> eventually. > > Should it be moved to a subdirectory for now? That would make the > sandbox meaningful in practice. I suppose it could be. Might make more sense to dedicate efforts towards fixing Cloud Hypervisor to accept file descriptors for the ~2 paths it currently needs to create, though. (That's obviously more work, but also more useful.) If we were to work around this in Spectrum, we could keep symlinks outside the directory pointing into it, to keep paths nice and avoid churn once we can put them back in the parent directory. --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iHUEARYKAB0WIQRV/neXydHjZma5XLJbRZGEIw/wogUCalfXVQAKCRBbRZGEIw/w ojVRAQCzGls4/iZSo+qVPffNgWVKdJQ/Qv/seOYLJtI+RxidRAD/d7XnhswcWuVg cUpCQPelQUwGozWuHUx0IZ8V8XHAjgw= =KBB6 -----END PGP SIGNATURE----- --=-=-=--