Email or username:

Password:

Forgot your password?
Ariadne Conill 🐰's posts Post Back to profile
Ariadne Conill 🐰

a popular libvirt-based VPS panel does not bother to run customer workloads under separate UIDs. oh dear.

A screenshot from a SolusVM box, it is running multiple customer workloads as the "qemu" user. These workloads belong to different customers and share a common security boundary, meaning that if qemu is compromised, the attacker will have access to every customer's disk images.
8 January at 14:36 | Open on social.treehouse.systems
5 comments
Ariadne Conill 🐰

this is bad, really bad. it is bad because an attacker can exploit qemu, and then break into a user account which has direct access to other customers' data.

8 January at 14:37 | Open on social.treehouse.systems
Ariadne Conill 🐰
Stefano BSD Cafe (snac instance account)
@ariadne@treehouse.systems yes, this is terrible. The best approach (even if it can be effective only if the exploit is in the user part, not the kernel part) is the one I generally use in FreeBSD: putting every different client's VM inside a jail.
8 January at 14:44 | Open on snac.bsd.cafe
April @ c3soft

@ariadne oh yea I cant imagine anything goingwrong

8 January at 14:37 | Open on fediverse.gay
Stefano BSD Cafe (snac instance account)
Go Up