Re: [Qemu-devel] Idea: fuse-kvm filesystem

2012-05-10 Thread Richard W.M. Jones
On Thu, May 10, 2012 at 03:29:54PM +0300, Avi Kivity wrote: > Currently when you mount a filesystem, you face two issues: > - you have to be root > - if the media is untrusted, it can exploit your kernel > > With kvm and fuse, we can have a virtualized kernel mount the > filesystem, and re-export

Re: [Qemu-devel] Idea: fuse-kvm filesystem

2012-05-10 Thread Jan Kiszka
On 2012-05-10 09:29, Avi Kivity wrote: > Currently when you mount a filesystem, you face two issues: > - you have to be root > - if the media is untrusted, it can exploit your kernel > > With kvm and fuse, we can have a virtualized kernel mount the > filesystem, and re-export to the host, which mo

Re: [Qemu-devel] Idea: fuse-kvm filesystem

2012-05-10 Thread Avi Kivity
On 05/10/2012 03:35 PM, Richard W.M. Jones wrote: > On Thu, May 10, 2012 at 03:29:54PM +0300, Avi Kivity wrote: > > Currently when you mount a filesystem, you face two issues: > > - you have to be root > > - if the media is untrusted, it can exploit your kernel > > > > With kvm and fuse, we can ha

Re: [Qemu-devel] Idea: fuse-kvm filesystem

2012-05-10 Thread Avi Kivity
On 05/10/2012 03:37 PM, Alex Bradbury wrote: > On 10 May 2012 13:29, Avi Kivity wrote: > > Currently when you mount a filesystem, you face two issues: > > - you have to be root > > - if the media is untrusted, it can exploit your kernel > > > > With kvm and fuse, we can have a virtualized kernel m

Re: [Qemu-devel] Idea: fuse-kvm filesystem

2012-05-10 Thread Alex Bradbury
On 10 May 2012 13:29, Avi Kivity wrote: > Currently when you mount a filesystem, you face two issues: > - you have to be root > - if the media is untrusted, it can exploit your kernel > > With kvm and fuse, we can have a virtualized kernel mount the > filesystem, and re-export to the host, which m

[Qemu-devel] Idea: fuse-kvm filesystem

2012-05-10 Thread Avi Kivity
Currently when you mount a filesystem, you face two issues: - you have to be root - if the media is untrusted, it can exploit your kernel With kvm and fuse, we can have a virtualized kernel mount the filesystem, and re-export to the host, which mounts it using a fuse interface. This solves both p