-
Notifications
You must be signed in to change notification settings - Fork 1
Open
Labels
choreUpdating grunt tasks etc.; no production code change.Updating grunt tasks etc.; no production code change.
Description
π Security Vulnerability: KVM permissions are set to world-writable (0666) which creates a security risk. This allows any user on the system to access the KVM device, potentially enabling privilege escalation or unauthorized access to virtualization features.
Suggested change
echo 'KERNEL=="kvm", GROUP="kvm", MODE="0666", OPTIONS+="static_node=kvm"' | sudo tee /etc/udev/rules.d/99-kvm4all.rules
echo 'KERNEL=="kvm", GROUP="kvm", MODE="0664", OPTIONS+="static_node=kvm"' | sudo tee /etc/udev/rules.d/99-kvm4all.rules
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
choreUpdating grunt tasks etc.; no production code change.Updating grunt tasks etc.; no production code change.