AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |
Back to Blog
The vagrant3/23/2023 First install the plugin: $ vagrant plugin install vagrant-vmware-desktop The installation method for this plugin follows the same methodology as previous Vagrant VMware plugins. The Vagrant VMware Desktop plugin is the Vagrant plugin which adds support for the vmware_desktop provider to Vagrant. After the package is installed, any user on the system can be allowed to interact with the utility without the need for privilege escalation. Isolating privileged activities to the Vagrant VMware Utility also means that only one privileged installation action must be taken on a system. Isolating the features which require privileged access into a system installer package provides an easier and more secure installation. This system installer provides a small utility service that Vagrant utilizes for interacting with VMware on the system. The Vagrant VMware Utility is a system installer package and is required by the Vagrant VMware Desktop plugin for proper functionality. Beyond this, various fixes were also made to the plugin itself for safer operation. The new unified Vagrant VMware plugin includes a new step (the VMware Utility) to separate the privileged operations required for the plugin to operate and relies on system installers to safely install these services. We apologize for how long this has taken and thank Mark for working patiently with us as we worked toward this release. It has taken until now to restructure the plugin to resolve these vulnerabilities. These vulnerabilities were reported to HashiCorp in late 2017 as part of a batch of critical findings by Mark Wadham. We will edit this post and link directly to the CVEs here as they are published. The vulnerabilities fixed include mechanisms for root privilege escalation from a malicious Vagrantfile or previously installed malware outside of the Vagrantfile. The update will work with all supported versions of VMware Fusion and Workstation. This update fixes a number of critical security vulnerabilities in prior versions and is highly recommended.
0 Comments
Read More
Leave a Reply. |