[Openstack] [OSSA 2012-011] Compute node filesystem injection/corruption (CVE-2012-3447)

Michael Still michael.still at canonical.com
Wed Aug 8 07:22:00 UTC 2012


On 08/08/12 14:33, Eric Windisch wrote:

> The solution here may be to use libguestfs, which seems to be a modern
> alternative to mtools, but to use it as a non-privileged user and to
> forego any illusions of mounting the filesystem anywhere via the kernel
> or FUSE.

Looking at the docs for the libguestfs python bindings, I think it
provides everything I need for config drive out of the box, so that's
certainly an option...

Mikal





More information about the Openstack mailing list