heckyel/cl
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Not enable vhost_net for security reason

Browse Source
This commit is contained in:
Jesús 2020-05-03 23:21:32 -05:00
parent 3ae448862b
commit 21f377fb70
No known key found for this signature in database
GPG Key ID: F6EE7BC59A315766
1 changed files with 14 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
content/articles/instalar-un-gestor-de-maquinas-virtuales-en-hyperbola-gnulinux-libre.md
View File

@ -75,10 +75,6 @@ Comprobar si existe `group="kvm"` o `group="78"`
# modprobe kvm_amd # modprobe kvm_amd
- Módulo vhost_net
# modprobe vhost_net
### Verifique que la máquina virtual este configurada correctamente ### Verifique que la máquina virtual este configurada correctamente
$ virt-host-validate $ virt-host-validate
@ -187,8 +183,22 @@ Por ejemplo:
<figcaption>Captura de pantalla de Trisquel GNU/Linux en Virtual Machine Manager</figcaption> <figcaption>Captura de pantalla de Trisquel GNU/Linux en Virtual Machine Manager</figcaption>
</figure> </figure>
### Módulos con problemas de seguridad
El módulo `vhost_net` tiene problemas de seguridad
[CVE-2018-3646][spectre]{:target="_blank" rel="noopener noreferrer"}
que es un error de CPU L1TF y SMT con posible fuga
de datos. Lo recomendable es desactivarlo de la
siguiente manera:
# modprobe -r vhost_net
Si estás en Hyperbola GNU/Linux-libre este módulo
viene desactivado.
[dragora]: https://dragora.org [dragora]: https://dragora.org
[trisquel]: https://trisquel.info [trisquel]: https://trisquel.info
[qemu]: https://wiki.qemu.org/Main_Page [qemu]: https://wiki.qemu.org/Main_Page
[spectre]: https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html
[vm]: https://virt-manager.org/ [vm]: https://virt-manager.org/
*[GUI]: Graphical user interface *[GUI]: Graphical user interface