Sean Christopherson 7ceedcefc2 KVM: Reject device ioctls from processes other than the VM's creator ... commit ddba91801aeb5c160b660caed1800eb3aef403f8 upstream. KVM's API requires thats ioctls must be issued from the same process that created the VM. In other words, userspace can play games with a VM's file descriptors, e.g. fork(), SCM_RIGHTS, etc..., but only the creator can do anything useful. Explicitly reject device ioctls that are issued by a process other than the VM's creator, and update KVM's API documentation to extend its requirements to device ioctls. Fixes: 852b6d57dc ("kvm: add device control API") Cc: <stable@vger.kernel.org> Signed-off-by: Sean Christopherson <sean.j.christopherson@intel.com> Signed-off-by: Paolo Bonzini <pbonzini@redhat.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2019-04-03 06:26:29 +02:00
..
arm	KVM: Call kvm_arch_memslots_updated() before updating memslots	2019-03-23 20:10:13 +01:00
async_pf.c	sched/swait: Rename to exclusive	2018-06-20 11:35:56 +02:00
async_pf.h	KVM: fix checkpatch.pl errors in kvm/async_pf.h	2015-06-19 17:16:25 +02:00
coalesced_mmio.c	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
coalesced_mmio.h	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
eventfd.c	Miscellaneous bugfixes, plus a small patchlet related to Spectre v2.	2018-07-18 11:08:44 -07:00
irqchip.c	KVM: use rcu access function for irq routing	2017-07-07 15:24:15 +02:00
Kconfig	KVM: arm64: Prevent KVM_COMPAT from being selected	2018-06-21 17:17:50 +01:00
kvm_main.c	KVM: Reject device ioctls from processes other than the VM's creator	2019-04-03 06:26:29 +02:00
vfio.c	vfio: New external user group/file match	2017-06-28 13:50:05 -06:00
vfio.h	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00