On Mon, Jul 24 2023 at 10:08:50 AM -0400, Demi Marie Obenour
<demiobenour(a)gmail.com> wrote:
I saw that libguestfs has a guestmount(1) tool, and I think this
could be
a potential solution. An exploit against the kernel FS driver would
only
grant access to a KVM guest, and the QEMU process can be tightly
sandboxed
by means such as seccomp and SELinux.
Ah, interesting. Maybe something like that would work, indeed....