Shared Folders Restriction?

[IchiroKawashima]

Hi,

I found that VMs can mount any folders owned by the user who runs Virtual Box (let's say, it's vbox).
This means that VMs can mount /home/vbox and edit /home/vbox/.config/VirtualBox/VirtualBox.xml anytime.
If the authentication library is set as Builtin, non-admin users could rewrite /home/vbox/.config/VirtualBox/VirtualBox.xml and get privileged.

I guess it would be better to add some logic that restricts shared folders to $brouserRestrictFolders.

Thank you.

[titoshadow]

Shouldn't that kind of restrictions rely on the web server more than phpvirtualbox ?

[trasherdk]

Nah, it's the $HOME of the user running Virtualbox.

I did try if open_basedir would have effect, it didn't 😢