On Wed, Oct 09, 2019 at 02:29:37PM -0300, Fabiano Rosas wrote:
Daniel P. Berrangé <berrange(a)redhat.com> writes:
> What userspace tool is broken, and in what way ?
The major use case, as far as I know, is from software license
managers which use this to determine how much to charge for
software. I would have to ask around to know exactly which ones and
how they operate.
Mostly such code should not need to know the real host model / serial
information. It should be sufficient to pass through fake data, as
long it is consistently fake for all VMs on the same host.
Still license managers like this are doomed in a virtualized world
as it is trivial to fake the information they're relying on.
> Re-introducing the host passthrough to satisfy a broken tool is
not
> very attractive because it reintroduces the security flaw that the
> QEMU change was fixing.
Sure, this is reasonable. I'm just trying to make it less painful for
those that depend on the old behavior for some reason. =)
Determined folks will probably just use <qemu:commandline> anyway.
Regards,
Daniel
--
|:
https://berrange.com -o-
https://www.flickr.com/photos/dberrange :|
|:
https://libvirt.org -o-
https://fstop138.berrange.com :|
|:
https://entangle-photo.org -o-
https://www.instagram.com/dberrange :|