Re: [Libguestfs] [PATCH] Add tune2fs support to libguestfs.

Thanks for all that Rich. My takeaways are: 1) The current file injection and disk resizing code in OpenStack doesn't provide sufficient protection against the possibility of users exploiting vulnerabilities in the kernel or core OS userspace utilities. However, there's no known vulnerability here that needs an urgent response (e.g. filing a CVE) - i.e. it's not like the issue with using qemu's disk format auto-detection. 2) Restricting the set of guest filesystems we support would eliminate one of the most likely sources of potential vulnerabilities. 3) Using libguestfs (and later, using it over libvirt/svirt) would provide much greater protection along with the potential to support things like LVM inside guest images.