Sean Christopherson ddba91801a KVM: Reject device ioctls from processes other than the VM's creator ... KVM's API requires thats ioctls must be issued from the same process that created the VM. In other words, userspace can play games with a VM's file descriptors, e.g. fork(), SCM_RIGHTS, etc..., but only the creator can do anything useful. Explicitly reject device ioctls that are issued by a process other than the VM's creator, and update KVM's API documentation to extend its requirements to device ioctls. Fixes: 852b6d57dc ("kvm: add device control API") Cc: <stable@vger.kernel.org> Signed-off-by: Sean Christopherson <sean.j.christopherson@intel.com> Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>		2019-03-28 17:27:06 +01:00
..
arm	ARM: some cleanups, direct physical timer assignment, cache sanitization	2019-03-15 15:00:28 -07:00
async_pf.c	KVM: fix some typos	2018-12-21 11:28:26 +01:00
async_pf.h
coalesced_mmio.c	kvm: Add memcg accounting to KVM allocations	2019-02-20 22:48:29 +01:00
coalesced_mmio.h	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
eventfd.c	kvm: Add memcg accounting to KVM allocations	2019-02-20 22:48:29 +01:00
irqchip.c	kvm: Add memcg accounting to KVM allocations	2019-02-20 22:48:29 +01:00
Kconfig	KVM: arm64: Prevent KVM_COMPAT from being selected	2018-06-21 17:17:50 +01:00
kvm_main.c	KVM: Reject device ioctls from processes other than the VM's creator	2019-03-28 17:27:06 +01:00
vfio.c	kvm: Add memcg accounting to KVM allocations	2019-02-20 22:48:29 +01:00
vfio.h	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00