diff options
| author | Daniele Di Proietto <diproiettod@vmware.com> | 2016-02-02 17:24:32 -0800 |
|---|---|---|
| committer | Daniele Di Proietto <diproiettod@vmware.com> | 2016-02-23 18:34:37 -0800 |
| commit | 1af27e8a4e08ac993834bcbc8ef49ef6e50a9385 (patch) | |
| tree | 3deec6f4d9536f0fc130c34a9f8f50d5a01b9939 /INSTALL.DPDK.md | |
| parent | 28f479c6110cddb21e009084cc7bb82d42486cb3 (diff) | |
| download | openvswitch-1af27e8a4e08ac993834bcbc8ef49ef6e50a9385.tar.gz | |
netdev-dpdk: Do not add vhost-user ports with '/' or '\' in name.
This check prevents an obvious way for a vhost-user socket to escape the
intended directory.
There might be other ways to escape the directory (none comes to mind at
the moment), but this is a problem that should be properly solved by
mandatory access control.
A similar check is done for a bridge name, since that name is used as
part of a socket as well.
Signed-off-by: Daniele Di Proietto <diproiettod@vmware.com>
Acked-by: Flavio Leitner <fbl@sysclose.org>
Diffstat (limited to 'INSTALL.DPDK.md')
| -rw-r--r-- | INSTALL.DPDK.md | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/INSTALL.DPDK.md b/INSTALL.DPDK.md index d2865c394..ca49106ce 100644 --- a/INSTALL.DPDK.md +++ b/INSTALL.DPDK.md @@ -511,7 +511,8 @@ Adding DPDK vhost-user ports to the Switch: Following the steps above to create a bridge, you can now add DPDK vhost-user as a port to the vswitch. Unlike DPDK ring ports, DPDK vhost-user ports can -have arbitrary names. +have arbitrary names, except that forward and backward slashes are prohibited +in the names. - For vhost-user, the name of the port type is `dpdkvhostuser` |