Skip to content

feat: add implementation of options to reduce attack surface #1738

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 2 commits into
base: master
Choose a base branch
from
Open

feat: add implementation of options to reduce attack surface #1738

wants to merge 2 commits into from

Conversation

philclifford
Copy link
Contributor

@philclifford philclifford commented Sep 21, 2025 •
edited
Loading

Description

adds '--paranoid' option (also triggered by setting QUICKEMU_PARANOID in the environment ). Also individual config file toggles are available for :

  • usb_redir="false"
  • usb_ccid="false"
  • folder_sharing="false"
  • ssh_fwd="false"

These default to "true" to retain the current behaviour. All are set to "false" by the environment variable or --paranoid option on the command line.

Type of change

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Documentation (updates the documentation)

Checklist:

  • I have performed a self-review of my code
  • I have tested my code in common scenarios and confirmed there are no regressions
  • I have added comments to my code, particularly in hard-to-understand sections
  • I have made corresponding changes to the documentation

@philclifford
fix: restore rockylinux dynamic releases
a8579b9 
The website was changed and the old parse was not cutting it
@philclifford philclifford mentioned this pull request Sep 21, 2025
Draft
3 tasks
@philclifford philclifford changed the title Feat 1722 feat: add toggles to reduce attack surface Sep 21, 2025
@philclifford philclifford changed the title feat: add toggles to reduce attack surface feat: add implementation of options to reduce attach surface Sep 21, 2025
@philclifford
feat add implementation of options to reduce attack surface
35293ec 
Closes quickemu-project#1722

adds '--paranoid' option (also triggered by setting QUICKEMU_PARANOID in the environment ). Also individual config file toggles are available for :
 - usb_redir="false"
 - usb_ccid="false"
 - folder_sharing="false"
 - ssh_fwd="false"

These default to "true"  to retain the current behaviour.
@philclifford philclifford changed the title feat: add implementation of options to reduce attach surface feat: add implementation of options to reduce attack surface Sep 21, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@flexiondotorg flexiondotorg Awaiting requested review from flexiondotorg

@lj3954 lj3954 Awaiting requested review from lj3954

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

feat: toggles to reduce attack surface

1 participant

@philclifford