openstack team mailing list archive
-
openstack team
-
Mailing list archive
-
Message #15583
Re: [OSSA 2012-011] Compute node filesystem injection/corruption (CVE-2012-3447)
On 08/08/12 14:33, Eric Windisch wrote:
> The solution here may be to use libguestfs, which seems to be a modern
> alternative to mtools, but to use it as a non-privileged user and to
> forego any illusions of mounting the filesystem anywhere via the kernel
> or FUSE.
Looking at the docs for the libguestfs python bindings, I think it
provides everything I need for config drive out of the box, so that's
certainly an option...
Mikal
References