Red Hat Bugzilla – Bug 502627
virtinst should always specify the disk image format in guest configuration
Last modified: 2009-10-05 10:40:19 EDT
It is possible for a guest with a raw formatted disk image to write a
header to that disk image describing another format (such as qcow2).
Stopping and subsequent restart of the guest will cause qemu to detect
that format, and could allow the guest to read any host file if qemu is
sufficiently privileged (typical in virt environments).
This means that we should always include the disk image format in the guest XML configuration e.g.
<disk type='file' device='disk'>
<target dev='hda' bus='virtio'/>
<driver name='qemu' type='raw'/>
See also bug #496092
This is in virtinst upstream:
There were some other bug fixes that came later as well. I'll be cutting a new release within the next couple weeks though, so it can probably wait till then.
This bug appears to have been reported against 'rawhide' during the Fedora 11 development cycle.
Changing version to '11'.
More information and reason for this action is here:
Moving to POST.
This code accrued quite a few fixes and is pretty invasive, so I'm not really comfortable backporting it. Closing this bug as RAWHIDE where it is currently fixed (and F-12).