← Back to team overview

openstack team mailing list archive

Re: [OSSA 2012-011] Compute node filesystem injection/corruption (CVE-2012-3447)

 

On 08/08/12 14:33, Eric Windisch wrote:

> The solution here may be to use libguestfs, which seems to be a modern
> alternative to mtools, but to use it as a non-privileged user and to
> forego any illusions of mounting the filesystem anywhere via the kernel
> or FUSE.

Looking at the docs for the libguestfs python bindings, I think it
provides everything I need for config drive out of the box, so that's
certainly an option...

Mikal



References